I want to make an Ethereum wallet where I can prove no one has the private keys in one place.

Basically, I was wondering whether the ECDSA signatures could be generated by multiparty computation like BLS signatures would be.

Failing that, at least can I use Shamir Secret Sharing and use M of N to do some kind of multisig shnorr signature? It needs to be something that Ethereum’s solidity will accept, in ecrecover, or at least for signing transactions on the blockchain.

The private key parts would reside on N different devices and be signed by doing stuff on M of then.

  • $\begingroup$ eprint.iacr.org/2019/114 (Fast Multiparty Threshold ECDSA with Fast Trustless Setup by Gennaro and Goldfeder) This paper should give you everything you need. $\endgroup$ Aug 23 at 20:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.