Skip to content

feat(crypto): realize Pedersen commitments with bounded fair-coin sampling #1806

Closed
#1814
Closed
feat(crypto): realize Pedersen commitments with bounded fair-coin sampling#1806
#1814
Assignees
SamuelSchlesinger

Description

@SamuelSchlesinger
SamuelSchlesinger
opened on Oct 30, 2026

Bounded follow-up to #1720 / #1801: implement the existing Pedersen commitment law approximately as a strict-PPT fair-coin program, while preserving its exact ideal PMF specification.

worker-codex-roadmap-crypto-20261030 claims this milestone as active, on planned branch feat/pedersen-fair-coin-realization in the isolated Extra-drive crypto lane. The public-operation bundle in #1801 remains on its own branch and review findings take priority.

Acceptance:

  • Reuse PrimeOrderGroupFamily.sampleExp and its existing native efficiency/error APIs, plus feat(crypto): certify public commitment operations #1801's evaluator certificate. Do not introduce another commitment model, sampler primitive, security game, or alias.
  • A ProbComp commitment-and-opening program receives unary accuracy parameter, the actual pedersenScheme.encodeKey public bytes, and the message. Certify uniform strict PPT in the complete encoded input.
  • State the sampled word-length bound and the exact relationship to the existing ideal commitment law, with error at most 1 / 2^n against every randomized Boolean continuation; prove supported outputs verify for valid messages.
  • Provide concrete checked instances, assess abstracts, run all six gates, and obtain independent exact-head API/correctness review outside the authoring fleet.

Existing notions considered: CommitmentScheme and its dependent PublicOperations, existing sampleExp / sampleModNat, the plain IsPPTOn calculus, and the continuation advantage bound advantage_bind_sampleExp_le. This is original implementation/approximation work for the existing model, not a claim of an additional literature security theorem. Key setup generation, full executable game security transfers, and the broader GMW/Rompel/OT objectives remain open. Source credit is preserved from the existing Samuel Schlesinger modules. AI assistance: Codex.

Activity

  1. SamuelSchlesinger
    self-assigned this
    on Oct 30, 2026

  2. SamuelSchlesinger commented on Oct 30, 2026

    @SamuelSchlesinger
    SamuelSchlesinger
    on Oct 30, 2026 – with ChatGPT Codex Connector
    CollaboratorAuthor

    worker-codex-roadmap-crypto-20261030 — active. Claiming the bounded acceptance criteria above on feat/pedersen-fair-coin-realization, stacked on #1801 at 89d20c0d6, in /media/samuel/Extra/complexitylib-codex-20261030-65g7glwh/template/.worktrees/crypto. Existing issue/PR searches found no overlapping sampler-realization owner. Next: reuse the existing sampleExp law/certificates and derive the public-input program, exact output law, 2^-n approximation bound, support correctness and opening-length bound.

  3. SamuelSchlesinger commented on Oct 30, 2026

    @SamuelSchlesinger
    SamuelSchlesinger
    on Oct 30, 2026 – with ChatGPT Codex Connector
    CollaboratorAuthor

    worker-codex-roadmap-crypto-20261030 — awaiting review: PR #1814 at 42c585203d3cd425c3f42c647f496867ae5dd937, stacked on reviewed #1801. The final source passes all six gates and the source audits; the PR links its durable validation record and no-impact abstract assessment. Coordinator/outside-author-fleet exact-head API/correctness review is requested for the new public approximation claim. Setup generation and executable-game security transfers remain open.

    Concrete placement follow-up: sampleExp, isPPTOn_sampleExp, and advantage_bind_sampleExp_le currently live in DiffieHellman.lean; existing consumers include DiffieHellman, ElGamal/ProbComp and CramerShoup/Reductions, now joined by PedersenCommitment/ProbComp. Moving them unchanged to a small DiscreteLog/Sampling module would let the Pedersen client import the shared sampler without the DDH layer. This PR reuses them and keeps that broader import refactor separate.

  4. SamuelSchlesinger commented on Oct 30, 2026

    @SamuelSchlesinger
    SamuelSchlesinger
    on Oct 30, 2026 – with ChatGPT Codex Connector
    CollaboratorAuthor

    worker-codex-roadmap-crypto-20261030 — active: the exact-head review approved 42c585203 without findings. Since prerequisite #1801 has landed, I am moving #1814 to actual main, preserving the reviewed payload, then refreshing validation and review coverage for the integrated revision.

  5. SamuelSchlesinger
    added a commit that references this issue on Oct 30, 2026

    chore(crypto): integrate current main for Pedersen realization

    18bfe78

  6. SamuelSchlesinger commented on Oct 30, 2026

    @SamuelSchlesinger
    SamuelSchlesinger
    on Oct 30, 2026 – with ChatGPT Codex Connector
    CollaboratorAuthor

    worker-codex-roadmap-crypto-20261030 — awaiting review: #1814 now targets main at integrated head 18bfe78a3, with the reviewed payload preserved and fresh full-six/source-audit validation recorded in the PR. Final-head delta review is requested from edemaine; /root and logsQ own queue follow-through after approval and current required checks.

  7. SamuelSchlesinger
    closed this as completedin #1814on Oct 30, 2026
  8. orbitingflea
    added a commit that references this issue on Oct 30, 2026

    feat(crypto): realize Pedersen commitments with bounded fair coins (c…

    188d28a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions