SHAKE256 is the hashing bottleneck inside Falcon, ML-DSA and SLH-DSA; exposing it natively lets -+ * on-chain PQC flows offload the hot path to audited Bouncy Castle rather than hand-rolled Solidity. ++ * on-chain PQC flows offload the hot path to Bouncy Castle rather than hand-rolled Solidity. + */ +public class SHAKE256PrecompiledContract extends AbstractPrecompiledContract { + @@ -522,7 +582,7 @@ index 0000000..2666602 +++ b/evm/src/main/java/org/hyperledger/besu/evm/precompile/SLHDSA128sPrecompiledContract.java @@ -0,0 +1,84 @@ +/* -+ * Copyright contributors to the AERE Network. ++ * Copyright contributors to the Aere Network. + * + * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at diff --git a/patches/0002-aere-pqc-precompiles-testnet.patch b/patches/0002-aere-pqc-precompiles-testnet.patch index 38bb7d9..209937f 100644 --- a/patches/0002-aere-pqc-precompiles-testnet.patch +++ b/patches/0002-aere-pqc-precompiles-testnet.patch @@ -10,20 +10,52 @@ Subject: [PATCH] Aere Network: ML-KEM-768 and Falcon HashToPoint precompiles NOT ACTIVE ON MAINNET. These two are built and known-answer tested on an isolated single-validator QBFT testnet only. Mainnet activation is a governance decision that has not been taken. Applies on top of patch 0001. +Modified upstream files. Two files touched by this patch are modified copies +of Hyperledger Besu sources, not new work by Aere Network: + + datatypes/src/main/java/org/hyperledger/besu/datatypes/Address.java + evm/src/main/java/org/hyperledger/besu/evm/precompile/MainnetPrecompiledContracts.java + +Aere Network changed both, against upstream commit +d2032017bb3b8cb215a97303980a1e4a643f7180. Both keep their original +"Copyright contributors to Hyperledger Besu" headers unchanged, which is what +Apache License 2.0 section 4(c) requires, and this patch adds to each a +separate "Modifications Copyright" block naming exactly what was changed. That +in-file block is the notice required by Apache License 2.0 section 4(b). It +travels inside the diff, so a tree with this patch applied carries the notice +whether you used git am or git apply. Every other file this patch touches is +new and was written by Aere Network, and each carries its own Apache-2.0 +header. + --- - .../hyperledger/besu/datatypes/Address.java | 6 + + .../hyperledger/besu/datatypes/Address.java | 13 +- .../HashToPointPrecompiledContract.java | 127 +++++++++++++++++ .../MLKEM768PrecompiledContract.java | 128 ++++++++++++++++++ - .../MainnetPrecompiledContracts.java | 2 + - 4 files changed, 263 insertions(+) + .../MainnetPrecompiledContracts.java | 6 +- + 4 files changed, 269 insertions(+), 5 deletions(-) create mode 100644 evm/src/main/java/org/hyperledger/besu/evm/precompile/HashToPointPrecompiledContract.java create mode 100644 evm/src/main/java/org/hyperledger/besu/evm/precompile/MLKEM768PrecompiledContract.java diff --git a/datatypes/src/main/java/org/hyperledger/besu/datatypes/Address.java b/datatypes/src/main/java/org/hyperledger/besu/datatypes/Address.java -index 0f486df..0ddc8ce 100644 +index 51397dc..4a70bc5 100644 --- a/datatypes/src/main/java/org/hyperledger/besu/datatypes/Address.java +++ b/datatypes/src/main/java/org/hyperledger/besu/datatypes/Address.java -@@ -106,6 +106,12 @@ public class Address extends BytesHolder { +@@ -16,10 +16,11 @@ + /* + * Modifications Copyright 2026 Aere Network. + * +- * This file was changed by Aere Network: five post-quantum precompile address ++ * This file was changed by Aere Network: seven post-quantum precompile address + * constants were added (AERE_FALCON512, AERE_FALCON1024, AERE_MLDSA44, +- * AERE_SLHDSA128S, AERE_SHAKE256, at 0x0ae1 through 0x0ae5). Nothing upstream +- * was removed or rewritten. ++ * AERE_SLHDSA128S, AERE_SHAKE256, at 0x0ae1 through 0x0ae5, and AERE_MLKEM768, ++ * AERE_HASHTOPOINT, at 0x0ae6 and 0x0ae7). Nothing upstream was removed or ++ * rewritten. + * + * The unmodified original is Hyperledger Besu commit + * d2032017bb3b8cb215a97303980a1e4a643f7180. The upstream copyright header above is +@@ -121,6 +122,12 @@ public class Address extends BytesHolder { /** AERE PQC precompile: SHAKE256 XOF (FIPS 202). */ public static final Address AERE_SHAKE256 = Address.fromHexString("0x0000000000000000000000000000000000000ae5"); @@ -43,7 +75,7 @@ index 0000000..49efff4 +++ b/evm/src/main/java/org/hyperledger/besu/evm/precompile/HashToPointPrecompiledContract.java @@ -0,0 +1,127 @@ +/* -+ * Copyright contributors to the AERE Network. ++ * Copyright contributors to the Aere Network. + * + * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at @@ -83,7 +115,7 @@ index 0000000..49efff4 + *
Algorithm (matches the reference {@code hash_to_point_vartime} exactly): absorb + * {@code nonce || message} into a SHAKE256 sponge, then repeatedly squeeze two bytes, interpret + * them as a big-endian 16-bit value {@code w}, and keep {@code w mod q} whenever {@code w < 5q = -+ * 61445}, until n coefficients are collected. Uses the audited Bouncy Castle SHAKE256 XOF. ++ * 61445}, until n coefficients are collected. Uses the Bouncy Castle SHAKE256 XOF. + */ +public class HashToPointPrecompiledContract extends AbstractPrecompiledContract { + @@ -176,7 +208,7 @@ index 0000000..cf455de +++ b/evm/src/main/java/org/hyperledger/besu/evm/precompile/MLKEM768PrecompiledContract.java @@ -0,0 +1,128 @@ +/* -+ * Copyright contributors to the AERE Network. ++ * Copyright contributors to the Aere Network. + * + * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with + * the License. You may obtain a copy of the License at @@ -221,7 +253,7 @@ index 0000000..cf455de + *
Determinism: FIPS-203 Encaps normally draws {@code m} from a CSPRNG, which cannot run inside a + * consensus-critical precompile. We take {@code m} from calldata and drive Bouncy Castle's + * ML-KEM.Encaps_internal (K-PKE.Encrypt with explicit coins), so every node computes the identical -+ * {@code (c, K)}. No cryptography is reimplemented here; the audited Bouncy Castle BCPQC ML-KEM ++ * {@code (c, K)}. No cryptography is reimplemented here; the Bouncy Castle BCPQC ML-KEM + * implementation on the classpath does the work. + */ +public class MLKEM768PrecompiledContract extends AbstractPrecompiledContract { @@ -304,10 +336,21 @@ index 0000000..cf455de + } +} diff --git a/evm/src/main/java/org/hyperledger/besu/evm/precompile/MainnetPrecompiledContracts.java b/evm/src/main/java/org/hyperledger/besu/evm/precompile/MainnetPrecompiledContracts.java -index 43d9fb7..38baa14 100644 +index 60e55af..19eef40 100644 --- a/evm/src/main/java/org/hyperledger/besu/evm/precompile/MainnetPrecompiledContracts.java +++ b/evm/src/main/java/org/hyperledger/besu/evm/precompile/MainnetPrecompiledContracts.java -@@ -236,5 +236,7 @@ public interface MainnetPrecompiledContracts { +@@ -17,8 +17,8 @@ + * Modifications Copyright 2026 Aere Network. + * + * This file was changed by Aere Network: populateForFutureEIPs was repointed +- * from populateForCancun to populateForOsaka, and five post-quantum precompiles +- * were registered in it (0x0ae1 through 0x0ae5). Nothing upstream was removed. ++ * from populateForCancun to populateForOsaka, and seven post-quantum precompiles ++ * were registered in it (0x0ae1 through 0x0ae7). Nothing upstream was removed. + * + * The unmodified original is Hyperledger Besu commit + * d2032017bb3b8cb215a97303980a1e4a643f7180. The upstream copyright header above is +@@ -250,5 +250,7 @@ public interface MainnetPrecompiledContracts { registry.put(Address.AERE_MLDSA44, new MLDSA44PrecompiledContract(gasCalculator)); registry.put(Address.AERE_SLHDSA128S, new SLHDSA128sPrecompiledContract(gasCalculator)); registry.put(Address.AERE_SHAKE256, new SHAKE256PrecompiledContract(gasCalculator)); diff --git a/precompiles/Address.java b/precompiles/Address.java index 0f486df..51397dc 100644 --- a/precompiles/Address.java +++ b/precompiles/Address.java @@ -12,6 +12,21 @@ * * SPDX-License-Identifier: Apache-2.0 */ + +/* + * Modifications Copyright 2026 Aere Network. + * + * This file was changed by Aere Network: five post-quantum precompile address + * constants were added (AERE_FALCON512, AERE_FALCON1024, AERE_MLDSA44, + * AERE_SLHDSA128S, AERE_SHAKE256, at 0x0ae1 through 0x0ae5). Nothing upstream + * was removed or rewritten. + * + * The unmodified original is Hyperledger Besu commit + * d2032017bb3b8cb215a97303980a1e4a643f7180. The upstream copyright header above is + * left exactly as it was found. + * + * This notice is required by Apache License 2.0 section 4(b). + */ package org.hyperledger.besu.datatypes; import static com.google.common.base.Preconditions.checkArgument; diff --git a/precompiles/AereFalconSupport.java b/precompiles/AereFalconSupport.java index 1dbb2b8..011fc21 100644 --- a/precompiles/AereFalconSupport.java +++ b/precompiles/AereFalconSupport.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/Falcon1024PrecompiledContract.java b/precompiles/Falcon1024PrecompiledContract.java index 80aca57..e383b1f 100644 --- a/precompiles/Falcon1024PrecompiledContract.java +++ b/precompiles/Falcon1024PrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/Falcon512PrecompiledContract.java b/precompiles/Falcon512PrecompiledContract.java index 5df074c..8c0a07e 100644 --- a/precompiles/Falcon512PrecompiledContract.java +++ b/precompiles/Falcon512PrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/HashToPointPrecompiledContract.java b/precompiles/HashToPointPrecompiledContract.java index 49efff4..4ab922f 100644 --- a/precompiles/HashToPointPrecompiledContract.java +++ b/precompiles/HashToPointPrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/MLDSA44PrecompiledContract.java b/precompiles/MLDSA44PrecompiledContract.java index f25be64..8c41a2f 100644 --- a/precompiles/MLDSA44PrecompiledContract.java +++ b/precompiles/MLDSA44PrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/MLKEM768PrecompiledContract.java b/precompiles/MLKEM768PrecompiledContract.java index cf455de..35d5c44 100644 --- a/precompiles/MLKEM768PrecompiledContract.java +++ b/precompiles/MLKEM768PrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/MainnetPrecompiledContracts.java b/precompiles/MainnetPrecompiledContracts.java index 43d9fb7..d75afaf 100644 --- a/precompiles/MainnetPrecompiledContracts.java +++ b/precompiles/MainnetPrecompiledContracts.java @@ -12,6 +12,20 @@ * * SPDX-License-Identifier: Apache-2.0 */ + +/* + * Modifications Copyright 2026 Aere Network. + * + * This file was changed by Aere Network: populateForFutureEIPs was repointed + * from populateForCancun to populateForOsaka, and five post-quantum precompiles + * were registered in it (0x0ae1 through 0x0ae5). Nothing upstream was removed. + * + * The unmodified original is Hyperledger Besu commit + * d2032017bb3b8cb215a97303980a1e4a643f7180. The upstream copyright header above is + * left exactly as it was found. + * + * This notice is required by Apache License 2.0 section 4(b). + */ package org.hyperledger.besu.evm.precompile; import static org.hyperledger.besu.datatypes.Address.P256_VERIFY; @@ -230,7 +244,7 @@ public interface MainnetPrecompiledContracts { // Activated on a running chain via genesis config "futureEipsTime"; no re-genesis needed. populateForOsaka(registry, gasCalculator); - // Native post-quantum precompiles (audited Bouncy Castle BCPQC verifiers). + // Native post-quantum precompiles (Bouncy Castle BCPQC verifiers). registry.put(Address.AERE_FALCON512, new Falcon512PrecompiledContract(gasCalculator)); registry.put(Address.AERE_FALCON1024, new Falcon1024PrecompiledContract(gasCalculator)); registry.put(Address.AERE_MLDSA44, new MLDSA44PrecompiledContract(gasCalculator)); diff --git a/precompiles/SHAKE256PrecompiledContract.java b/precompiles/SHAKE256PrecompiledContract.java index 0c20e6a..d3c87ec 100644 --- a/precompiles/SHAKE256PrecompiledContract.java +++ b/precompiles/SHAKE256PrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at diff --git a/precompiles/SLHDSA128sPrecompiledContract.java b/precompiles/SLHDSA128sPrecompiledContract.java index 2666602..5e7527a 100644 --- a/precompiles/SLHDSA128sPrecompiledContract.java +++ b/precompiles/SLHDSA128sPrecompiledContract.java @@ -1,5 +1,5 @@ /* - * Copyright contributors to the AERE Network. + * Copyright contributors to the Aere Network. * * Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with * the License. You may obtain a copy of the License at