From 0df53dc0a9f83e8679692f4ae7576d1ec5ca1008 Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Tue, 6 Oct 2026 23:31:44 +0000 Subject: [PATCH] Plan cryptanalysis: the floor is DAA 831,600 (a week past publish 2), so the start to quote is 15 October 2026, 09:00 UK, never 14; the payer entity is the project lead's to confirm The flip comes by signal at the first epoch boundary after a one-day window carries 95 percent (earliest about 00:45 UK on 8 October) or at the floor on 14 October; the week of class v4 hash closes about 00:45 UK on 15 October at the earliest (Friday 16 if the window needs a second day, 21 October if the flip waits for the floor). Section 5.2 and the one page: Igneum Labs LTD (DIFC) as payer is taken from the litepaper and the ledger decisions; its existence, name and standing are confirmed by the project lead before any email goes. Co-Authored-By: Claude Fable 5.1 --- docs/plans/cryptanalysis.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/docs/plans/cryptanalysis.md b/docs/plans/cryptanalysis.md index 6777dcbdd..3c96f5114 100644 --- a/docs/plans/cryptanalysis.md +++ b/docs/plans/cryptanalysis.md @@ -11,9 +11,9 @@ What this plan builds on, read in full: the mixer brief of `docs/plans/funding.m | What is bought | Two paid, independent attacks on the hash class that ships (class v4, generator 4), plus one paper chip-design estimate from an ASIC house, against a frozen target and the published chip model. Not a new puzzle (lane 8 owns that), not the finality rule, not the proof system | | Who | Lot A: one firm with person-days for the structural attacks (the mixer, the chained cache, the shadow block, the acceptance rule, the verifier bound). Lot B: one academic group for the models (time-memory trade-off, the draw census, the era draw, the ladder). Lot C: one ASIC estimation house for k, area, NRE and unit cost at N5 and 28 nm. Shortlist in section 2; nobody has been contacted | | Shape | Three fixed-price lots, each with a stated person-day bound and a timebox; a report published whole, pass or fail, in the ledger, with its fix beside every finding. A cryptanalysis prize is a separate question for the project lead (section 3.3): the NO bounty rule of 6 October 17:35 UTC is a NO DEVICE bounty rule by its text, and the same outcome left "one cryptanalysis prize of USD 50,000 ... escrowed before it is named" as the project lead's call later | -| When | 0.3.15's publish 2 landed at 00:43 UK on 7 October 2026; class v4 flips at the floor (about 04:45 UK on 7 October) or by signal inside the one-day window (by about 00:45 UK on 8 October). Seven days of real class v4 hash end seven days after the flip hour. The freeze commit is tagged the morning the week closes; the earliest engagement start is Wednesday 14 October 2026, 09:00 UK if the flip was at the floor, Thursday 15 October 2026, 09:00 UK otherwise, and 15 October is the date to quote until the flip hour is read from the chain (section 4). Firms set their own calendars: the RandomX reviews ran 3 to 6 weeks each and about 9 weeks from commission to the last report | +| When | 0.3.15's publish 2 landed at 00:43 UK on 7 October 2026 with the floor at DAA 831,600, a week past the publish. Class v4 flips by miner signal at the first epoch boundary after a one-day window carries 95 percent (earliest about 00:45 UK on 8 October), or at the floor on 14 October. Seven days of real class v4 hash end seven days after the flip hour: about 00:45 UK on 15 October at the earliest. The freeze commit is tagged the morning the week closes; the earliest engagement start is Thursday 15 October 2026, 09:00 UK (Friday 16 October if the window needs a second day; a week later if the flip waits for the floor), never 14 October (section 4). Firms set their own calendars: the RandomX reviews ran 3 to 6 weeks each and about 9 weeks from commission to the last report | | Budget | Low USD 80,000 (Lot A short, Lot B timeboxed, Lot C as a 10-day estimate), base USD 120,000, high USD 160,000 (Lot A at 40 person-days, Lot B at 30, Lot C with a synthesised core at two nodes). Section 5 prices each lot from the public precedents. The whole engagement is one to two weeks of year-1 miner emission at the low price input (`funding.md` B8) | -| What the project lead does | (1) approve or amend the scope (section 1); (2) tick the contacts he permits, in order (section 2); (3) decide the prize question (section 3.3); (4) approve the outreach email (section 6) and the sending address; (5) confirm the budget point (section 5). Nothing moves without each | +| What the project lead does | (1) approve or amend the scope (section 1); (2) tick the contacts he permits, in order (section 2); (3) decide the prize question (section 3.3); (4) approve the outreach email (section 6) and the sending address; (5) confirm the budget point (section 5); (6) confirm the payer entity, its exact name and standing (section 5.2), before any email goes. Nothing moves without each | ## 1. Scope @@ -157,15 +157,15 @@ Everything, by the standing rules: a paid review is published whole, pass or fai ### 4.1 The week of real hash -The clock starts at the class v4 flip, not at the publish. 0.3.15's publish 1 (binaries on the thirteen-field object) ran on the evening of 6 October; publish 2 (the sixteen-field object with `program_class_v4_activation_daa` = the floor, publish DAA + 14,400 rounded up to the epoch, at least 10,800 ahead, and `program_class_v4_signal_window_daa` = 86,400) landed at 00:43 UK on 7 October 2026 (the coordinator's line). The class flips at the first epoch boundary after 95 percent of blue blocks in the window signal, or at the floor regardless (`release-0.3.15.md` section 2; `counter-asic-3-status.md` P2). At about one block a second the floor is about 4 hours after the publish and the full window is 24 hours, so the flip lands between about 04:45 UK on 7 October and about 00:45 UK on 8 October. +The clock starts at the class v4 flip, not at the publish. 0.3.15's publish 1 (binaries on the thirteen-field object) ran on the evening of 6 October; publish 2 (the sixteen-field object with `program_class_v4_activation_daa` = the floor and `program_class_v4_signal_window_daa` = 86,400) landed at 00:43 UK on 7 October 2026 with the floor at DAA 831,600, a week past the publish (the coordinator's line, 7 October; the plan's earlier publish + 14,400 figure from `release-0.3.15.md` section 2 was the pre-cut text). The class flips by miner signal at the first epoch boundary after a one-day window carries 95 percent of blue blocks, or at the floor regardless (`counter-asic-3-status.md` P2). So the earliest flip is about 00:45 UK on 8 October (the first full window), a day later for each day the window falls short, and the floor is 14 October. | Flip case | The flip | A week of class v4 hash closes | Earliest engagement start | |---|---|---|---| -| At the floor (the whole fleet signalling or nobody signalling): about 7 October 2026, 04:45 to 06:00 UK | 7 October, early morning | 14 October 2026, 04:45 to 06:00 UK | Wednesday 14 October 2026, 09:00 UK | -| By signal later in the window | 7 October, daytime or evening | 14 October, the same clock hour | Thursday 15 October 2026, 09:00 UK | -| At the end of the window | up to 8 October, about 00:45 UK | 15 October, about 00:45 UK | Thursday 15 October 2026, 09:00 UK | +| By signal at the first full window | 8 October 2026, about 00:45 UK | 15 October 2026, about 00:45 UK | Thursday 15 October 2026, 09:00 UK | +| By signal a day later (the window needs a second day) | 9 October, about 00:45 UK | 16 October, about 00:45 UK | Friday 16 October 2026, 09:00 UK | +| At the floor, DAA 831,600 | 14 October | 21 October | Wednesday 21 October 2026, 09:00 UK | -So the earliest start is Wednesday 14 October 2026, 09:00 UK, and Thursday 15 October 2026, 09:00 UK is the date to quote to a firm until the flip hour is read from the chain. +So the start to quote to a firm is Thursday 15 October 2026, 09:00 UK, never 14 October; main moves it a day per day of window shortfall once the flip hour is read from the chain. The flip hour is read from the chain (the first block with the v4 program id; `igneum_getRecentBlocks` in 0.3.16, the observer's class column until then), never from a report. Main checks it before this table is quoted to the project lead. @@ -191,7 +191,7 @@ Owed before the freeze and not a precondition of it: the O-1.14 laptop run (2 ho ### 4.3 The calendar after the start -Firm calendars are theirs. From the RandomX pattern (CCS funded in May 2019; X41 ran 3 to 28 June; Trail of Bits reported 2 July; Kudelski 2 July; Quarkslab 30 July): about 10 weeks from commission to the last report. Outreach, quotes and contracts come before the start and take the firms' time, not ours: a contact the project lead ticks tonight can have a quote back in about a week, so the first contacts should go the week of 7 October if a start near 15 October is wanted; a firm's own backlog decides the real kickoff, and the RandomX round shows one to two weeks between a signed scope and the first engineer-day. The go checklist row (`testnet-go.md`, 9a per `funding.md` B8): the reports in hand before the last announced reset of testnet-1, so the vectors the testnet freezes are the reviewed ones; mainnet never opens without the published reports. +Firm calendars are theirs. From the RandomX pattern (CCS funded in May 2019; X41 ran 3 to 28 June; Trail of Bits reported 2 July; Kudelski 2 July; Quarkslab 30 July): about 10 weeks from commission to the last report. Outreach, quotes and contracts come before the start and take the firms' time, not ours: a contact the project lead ticks tonight can have a quote back in about a week, so the first contacts should go the week of 7 October if a start on 15 October is wanted; a firm's own backlog decides the real kickoff, and the RandomX round shows one to two weeks between a signed scope and the first engineer-day. The go checklist row (`testnet-go.md`, 9a per `funding.md` B8): the reports in hand before the last announced reset of testnet-1, so the vectors the testnet freezes are the reviewed ones; mainnet never opens without the published reports. ## 5. Budget @@ -225,7 +225,7 @@ What the precedents say about rates: in 2019 a European firm cost USD 1,400 to 1 | C, the ASIC house | 6 to 8 engineer-days: a paper estimate from published cell libraries and the reads-in-flight model, k with a range at one node: USD 12,000 (approximate) | 12 engineer-days: one synthesised lane and the 32-lane shuffle crossbar at 28 nm on an open PDK, N5 by published scaling, NRE and unit cost at two volumes, the FPGA row: USD 25,000 | 20 engineer-days: the above plus a placed-and-routed lane with power from a gate-level simulation of three real class v4 programs, the controller's power from a vendor datasheet, the model-input verdict table in full: USD 35,000 | | Total | USD 80,000 | USD 120,000 | USD 160,000 | -Inside each point and not extra: the one-week re-run after a parameter move (priced into each fixed sum), the day-rate judging of any finding, the publication. Outside every point: the optional USD 50,000 prize (escrowed separately, only if the project lead says yes), the F2 FPGA hour (USD 2 to 8), the O-1.14 laptop run (agent hours). Against `funding.md` section 2 the line keeps its USD 80,000 to 160,000 row; the review-and-audit bucket stays USD 290,000 to 570,000 with it; all approximate, and the coordinator re-totals when the point is chosen. +Inside each point and not extra: the one-week re-run after a parameter move (priced into each fixed sum), the day-rate judging of any finding, the publication. Outside every point: the optional USD 50,000 prize (escrowed separately, only if the project lead says yes), the F2 FPGA hour (USD 2 to 8), the O-1.14 laptop run (agent hours). The payer named throughout this plan and in the email, Igneum Labs LTD (DIFC), is taken from `site/litepaper.html` and `ledger-decisions.md`; the company's existence, exact name and standing as the contracting party are the project lead's to confirm before any email goes, not the plan's to assert. Against `funding.md` section 2 the line keeps its USD 80,000 to 160,000 row; the review-and-audit bucket stays USD 290,000 to 570,000 with it; all approximate, and the coordinator re-totals when the point is chosen. Which point this lane recommends: base. Low drops the ladder's law and the uniformity censuses, which are the two questions nothing in the project has measured, and buys a Lot C figure with no synthesis behind it, which is the one number the whole chip model turns on. High buys mostly calendar and a US firm's name. the project lead decides.