AdeAtlas
Invariants / CN-CRYPTO-02

CN-CRYPTO-02

CN true partial

All consensus-relevant hashes must be domain-separated and unambiguous

Source

classification_table.md §J

Enforcement trace

Code

Tests 3

  • vrf_input_layout_is_41_bytes_with_correct_tag
  • vrf_role_tags_match_convention
  • vrf_input_byte_layout

CI 0

no CI script — gap

Strengthened in

PHASE4-N-B

Attack rationale

Prevents cross-domain hash confusion.

Evidence notes

Universal: domain separation prevents cross-domain hash confusion in any cryptographic system. PHASE4-N-B S-B3 adds the typed Praos VRF input — 8-byte BE slot || 32-byte epoch nonce || 1-byte role tag (NONCE=0x4E, LEADER=0x4C) — built by a single audited function so callers cannot accidentally cross domains.