I read about ways to create a t-of-n threshold signature, corresponding to a collective public key of n players. (https://tools.ietf.org/html/draft-ford-cfrg-cosi-00 and Does Ed25519 support cryptographic threshold signatures?).

Is it possible to verify a t-of-n signature, by knowing only the collective public key of all n players, and not the personal public keys of the signing (t) players? I.e. the signature can be treated (verified) like a "normal" Ed25519 signature?

  • $\begingroup$ So essentially you are asking "is there a secure threshold multi-party signing protocol that generates signatures verifiable using the standard Ed25519 verification algorithm"? $\endgroup$ – SEJPM Jul 20 '18 at 13:29
  • $\begingroup$ The answer is yes. $\endgroup$ – David Schwartz Mar 25 at 17:56

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.