All Questions
Tagged with cryptocurrency schnorr-signature
5 questions
1
vote
1
answer
51
views
Does FROST threshold signing go well with BIP340?
FROST is a popular threshold signing protocol for Schnorr-style signatures.
BIP340 is a specification for an instantiation of a Schnorr-style signature scheme for Bitcoin Taproot. Specifically, they ...
- 697
2
votes
1
answer
88
views
Before Bitcoin what was the motivation for researching key aggregation multisig and threshold schemes?
The motivation for key aggregation multisig and threshold schemes (e.g. MuSig(2), FROST etc) in Bitcoin is obvious. Signatures are a large part of every transaction, all the nodes on the network are ...
- 207
3
votes
1
answer
110
views
How would a malicious group of co-signers use a hash collision to sign an unintended message?
According to BIP340:
However, a major drawback of this optimization is that finding collisions in a short hash function is easy. This complicates the implementation of secure signing protocols in ...
- 31
0
votes
1
answer
644
views
Related Key Attack on Schnorr Signature - Why does the challenge include $\psi = g^x$, not $y$?
The original Schnorr signature scheme suffers from a Related Key Attack (RKA) as described by Morita et al. The authors of this paper then suggest a modification to the signature algorithm to prevent ...
- 33
1
vote
1
answer
76
views
Monero Ring CT sj calculation
For a university project, I am currently implementing the RingCT Ring signatures as used in Monero (before the introduction of Bulletproofs) as laid out in this paper.
To close the ring we calculate ...
- 121