From 176a68a774624dda6d0caba4e0cdd530d768c5ac Mon Sep 17 00:00:00 2001 From: igneum-labs <337424239+igneum-labs@users.noreply.github.com> Date: Wed, 7 Oct 2026 20:40:17 +0000 Subject: [PATCH] in-house-pass.md: the weak-day census reconciled (median 226, 15 days a century; F4's carry digit at position 32) Co-Authored-By: Claude Fable 5.1 --- docs/plans/cryptanalysis/in-house-pass.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/plans/cryptanalysis/in-house-pass.md b/docs/plans/cryptanalysis/in-house-pass.md index 49cb8149f..b853923e1 100644 --- a/docs/plans/cryptanalysis/in-house-pass.md +++ b/docs/plans/cryptanalysis/in-house-pass.md @@ -157,7 +157,7 @@ It is not an independent review and is never called one. Nothing is sent outside | Lane | Plan on the mirror | First results | Defender's line | Box-hours | |---|---|---|---|---| | adv-mixer | 1d720654, 19:09 BST | e35556af, 19:40 BST: Q1 algebraic structure BOUND (fold probe 1e6 of 1e6 affinity violations, 0 of 256 dead word pairs, 0 of 1e6 key-order agreements; integral degree at least 16 after one application, saturated after two; 9,360 ops per item stand); courtesy readings on Q2 (full diffusion at 2 applications, margin 6 of 8) and Q3 (2^24 days, best day 1.17x FPGA multiply datapath, 1 in 2^24, no DSP or wall-time gain) | pending | 0.4 | -| adv-mixer-2 | 5704a7b3, 19:32 BST (IDENTICAL at 7a7caa34 and 04c4d9bc; about 4 box-hours estimated) | tip ae3088a9, 21:3x BST (first word from the lane since spawn): harness built on both boxes (binary 88f6a3ed, outside the mirror), two chains waiting at class adv, 32 threads (box 2: the 2^24 census, the calendar, the small-constant-multiplier calendar and tail, avalanche; box 1: the 2^32 census and the redraw census); nothing hand-started beyond three sub-11 s smoke runs. Rows at 49656c2e, 21:3x BST: model A is an FPGA LUT-area gain for a per-day build (multiplier adders), NOT a wall-time or op-count gain: under the chip model's 9,360 ops per item the per-day gain is 1.0 on every day for every GPU, the verifier and any chip with a general multiplier; against the exact median 226, P(model A at or above 1.1x) = 5.69e-4 = 2^-10.8 per day (the earlier 2^-7.9 used a provisional median of 231); model C (DSP) stays under 2^-20 at 1.1x (1.067x on 2^-15 of days); the 1.1x-on-2^-20 threshold is crossed by model A only, the same bounded class as AP-F4-1; worst real day 29337 = 2050-04-28 at 1.113x, 15 days over 1.1x in 100 years; a redraw rule row (continue the stream and redraw all 40 draws if cost A is 205 or less, or a 2-adder MUL, or all ROT equal; about 22 days per 100 years redrawn) with the before fraction, the after fraction owed with the redraw census; no seed collisions or stream shifts; the 2^24 census matches the exact table on every class; all six plants fire. Running: the small-constant-multiplier calendar on box 2 (24 cores); the 2^32 census waiting on box 1. The coordinator wrongly chased this plan as overdue between 20:25 and 20:32 BST | pending | | +| adv-mixer-2 | 5704a7b3, 19:32 BST (IDENTICAL at 7a7caa34 and 04c4d9bc; about 4 box-hours estimated) | tip ae3088a9, 21:3x BST (first word from the lane since spawn): harness built on both boxes (binary 88f6a3ed, outside the mirror), two chains waiting at class adv, 32 threads (box 2: the 2^24 census, the calendar, the small-constant-multiplier calendar and tail, avalanche; box 1: the 2^32 census and the redraw census); nothing hand-started beyond three sub-11 s smoke runs. Rows at 49656c2e, 21:3x BST: model A is an FPGA LUT-area gain for a per-day build (multiplier adders), NOT a wall-time or op-count gain: under the chip model's 9,360 ops per item the per-day gain is 1.0 on every day for every GPU, the verifier and any chip with a general multiplier; against the exact median 226, P(model A at or above 1.1x) = 5.69e-4 = 2^-10.8 per day (the earlier 2^-7.9 used a provisional median of 231); model C (DSP) stays under 2^-20 at 1.1x (1.067x on 2^-15 of days); the 1.1x-on-2^-20 threshold is crossed by model A only, the same bounded class as AP-F4-1; worst real day 29337 = 2050-04-28 at 1.113x, 15 days over 1.1x in 100 years; RECONCILED with the attack-pass lane's F4 at 21:4x BST (F4 record section 9, both medians side by side): F4's NAF weight counted a carry digit at position 32 that a 32-bit multiplier never pays (0.333 digits per word, 5.3 adders per day), the whole of 231 against 226 and 12 against 15 days a century; the agreed figure is median 226, a 1.1x gain at cost A at most 205, 5.69e-4 of days (2^-10.8), 15 days a century, worst 2050-04-28 at 1.113x; the DSP-bound readings agree at 0 for k at least 2; F4's PASS against class v4 stands; the redraw rule for the next class takes adv-mixer-2's form; a redraw rule row (continue the stream and redraw all 40 draws if cost A is 205 or less, or a 2-adder MUL, or all ROT equal; about 22 days per 100 years redrawn) with the before fraction, the after fraction owed with the redraw census; no seed collisions or stream shifts; the 2^24 census matches the exact table on every class; all six plants fire. Running: the small-constant-multiplier calendar on box 2 (24 cores); the 2^32 census waiting on box 1. The coordinator wrongly chased this plan as overdue between 20:25 and 20:32 BST | pending | | | adv-mixer-3 | 37a08b6c, 19:4x BST | rows committed before the 20:21 BST kill (3cb6c1df and later): line-index bits uniform at 0 to 8 applications on day 20729; the SAC and linear bands clean at 2 to 8 applications on both days (a k = 1 statistic exists, the known single-application diffusion); rotational-XOR clean at 1 to 4 on both days; SAT at 1 application; THE ROUND MARGIN AS IT STANDS: no statistic survives 2 of the 8 applications between reads. Lost to the kill: SAC at 5 to 8 and its 2^27 rows, the 2^28 SAC-zero rows on 20733, the index census on 20733 at 2 to 8, CaDiCaL at 2 to 4; re-queued as queue 17 through the lease. Earlier: sweeps on both boxes from 19:42 and 19:47 BST (index census, SAC, differential, linear, rotational-XOR on days 20729 and 20733; the SAT model under CaDiCaL 3.0.1) | pending | | | adv-cache | 476e4516, 19:04 BST | 2c7bb6b4, 19:33 BST; FINAL 49ef7747, 19:50 BST: every row BOUND, every plant fired (the recompute curve monotone toward the full store, f = 1/2 at 1.26x the ops and 0.875x of the full-store chip's rate under equal silicon; no cheaper fill; chain avalanche full at every j; line index uniform over 160 day keys and about 1.6 x 10^10 reads; batching loses to the stride store from 32 MiB) | 19:5x BST, NO DISPUTE: Q1b, Q1c and Q4 stand as BOUND from the defender (the curve equals logs/queue-a/curve.log row for row; target 017e7037; ledger honest; energy columns from chip-model-v3 5.2); Q2 and Q3 were measured before the re-scope and stand as readings for adv-cache-2 to confirm or contradict, not as its verdict | 0.55 | | adv-cache-2 | 3d9bcece, 19:31 BST | tip 46551013, 21:2x BST: the 2^35-read line census PASS over 272 days; the 16,384-day weak-day scan PASS; the site finding is now a CLASS: 3 of 432 load sites (Devnet 3 site 0; era-fixed-20 site 11; era-drawn-2 site 13) concentrate item reads 1.26x to 1.45x at their top 0.1 percent, each attributed to the shadow block's last write to the load's source register (mul: the product low-bit law 0.25, 0.375, 0.4375 on bits 0 to 2, measured exactly; mulhi: a 52x hi16 bucket and one item read by 16 whole warps; sub), worth 0.03 to 0.1 percent of a hash's reads each; handed to adv-accept's freshness question in the report. Earlier: first rows 19:5x BST (report being pushed): tip 4f470d40 at 20:23 BST, about 0.95 box-hours, killed its one running census at 20:20 BST (11 of 32 drawn programs kept as partial), re-queue pending on the lease; two FINDING rows for the defender: Devnet 3 load site 0 (instruction 3) non-uniform at the item level (chi2/dof 3.70 at 2^26, top 0.1 percent at 1.449x its control, a fixed per-item weight from iteration 1, a low-bit bias of its source register; worth 0.1 percent of a hash's reads to a store); and the chip model's f = 0.25 and f = 0.5 partial-store rows overstate the recompute share at the measured window hit rates (0.883x and 0.838x of its ops per hash at the mean; 0.56x for Devnet 3's half; the full-store verdict unchanged). Earlier: Q1 line census at 2^31 reads PASS (segments +4.84 sigma against a control at +4.24; top 1 percent of lines 1.1198 against 1.1196 percent); Q3 steering PASS (worst cell 3.95 sigma); Q2 Devnet 3 at 2^24 nonces: fingerprint e510ad92b4d24846 reproduced through its mirror, items and lines clear against the window-model control (1.003x), one load site (site 0, instruction 3) non-uniform at chi2/dof 1.67 and 1.29x at its top 0.1 percent, worth 0.03 percent of a hash's reads; the window layer puts 36 to 45 percent of reads in one aligned quarter (model exact to 4 digits), being priced against the chip model's partial rows | pending | |