ZIPsZoo Proposals
All Proposals
ZIP-0820

Contract Auth via Z-Chain Proof — Zoo mirror of HIP-0104

Draft

Zoo-side mirror of Hanzo HIP-0104. Four precompiles at 0x0301..0x0304 (ML-DSA-65 / ML-DSA-87 / SLH-DSA / Z-Chain auth proof) provide the contract-side strict-PQ auth surface on Zoo Network. Heavy spec lives in HIP-0104.

Type
Standards Track
Category
Core
Author
Zoo Labs Foundation
Created
2026-05-11
pqcontract-authprecompilez-chainmirrorhip-0104

ZIP-0820: Contract Auth via Z-Chain Proof

Abstract

ZIP-0820 mirrors HIP-0104 into Zoo Network. Four precompiles expose the strict-PQ contract-auth surface to EVM-compatible contracts on Zoo Network:

  • 0x0301 — pq_verify_mldsa65, FIPS 204 ML-DSA-65 verify.
  • 0x0302 — pq_verify_mldsa87, FIPS 204 ML-DSA-87 verify (high-value).
  • 0x0303 — pq_verify_slh_dsa, FIPS 205 SLH-DSA verify (hash-based backstop).
  • 0x0304 — pq_verify_z_auth_proof, STARK_FRI_SHA3_PQ proof verifier from ZIP-0810 / HIP-0078; returns the authenticated 48-byte AccountID and verified_at_height.

Each precompile returns (bool ok, bytes payload). Contracts call these via standard EVM staticcall. ecrecover is refused under ZOO_STRICT_PQ.

Mirrored profile

ProfileID:           0x04  (ProfileZooStrictPQ)
ProfileName:         ZOO_STRICT_PQ
HashSuiteID:         SHA3_NIST                (0x01)
IdentitySchemeID:    ML_DSA_65                (0x42)
ProofPolicyID:       STARK_FRI_SHA3_PQ        (0x10)
MinSoundnessBits:    128
MinHashOutputBits:   384
RequireTransparent:  true
ForbidPairings:      true
ForbidKZG:           true
ForbidTrustedSetup:  true
ForbidClassicalSNARKs: true
ForbidDevProofs:     true
ForbidFallbacks:     true

Zoo-specific bindings

  • luxfi/consensus/protocol/auth/precompile.go is reused; four PrecompileAddrPQVerify* constants pin the EVM precompile addresses at 0x0301..0x0304. The Zoo EVM imports luxfi/coreth/core/vm/contracts_pq.go directly.
  • Gas schedule lives in the coreth wiring (core/vm/contracts_pq.go) and is calibrated against the canonical verifier benchmark in luxfi/consensus.
  • ZRC-20/721/1155 standard tokens migrating from classical ecrecover paths use 0x0301 for direct ML-DSA-65 verify of HIP-0087 / ZIP-0815 permits.
  • KAT vectors reused from luxfi/coreth/core/vm/testdata/precompile_pq_v1.json.

Compliance

A Zoo EVM contract calling ecrecover under ZOO_STRICT_PQ reverts with ErrEcrecoverRefused. Contracts MUST migrate to one of staticcall(0x0301..0x0304) before profile activation.

Governance

Zoo Labs Foundation owns this ZIP via the canonical zips.zoo.ngo process.

References

  • HIP-0104 — canonical source of truth.
  • LP-179 — Lux-side mirror.
  • LP-070 — ML-DSA primitive.
  • ZIP-0810 — Z-Chain proof system.
  • ZIP-0813, ZIP-0814, ZIP-0815 — AccountID, TxAuthEnvelope, PQ Permit.
  • ZIP-0014 — Zoo KMS Integration via Lux KMS.
  • NIST FIPS 204, FIPS 202, SP 800-185.
  • luxfi/consensus/protocol/auth/precompile.go.
  • luxfi/coreth/core/vm/contracts_pq.go.