I am looking for references for the following problem:
Consider we have a DSA with the keypair $(sk, pk)$ and a message $m$, such that its signature is $s = sig(m,sk)$ and the verification result is $v=ver(s,pk) $.
Now, I would like to have a threshold DSA with 2 players (for simplicity) with keypairs $(sk_1, pk_1)$ and $(sk_2, pk_2)$ such that their signature $s_t=sig_t(m,sk_1, sk_2)$ is equivalent to the original $s$ in the sense that $v \equiv v_t = ver_t(s_t,pk_1,pk_2) \equiv ver(s_t,pk) $.
Simply speaking, I would like to sign with a threshold signature but verify with one master key.
- Have there be any work in this direction?
- What keywords and topics should I be looking for?