All Questions
Tagged with threshold-cryptography schnorr-signature
7 questions
8
votes
1
answer
2k
views
Does Ed25519 support cryptographic threshold signatures?
This is a loaded question so I'll list the concerns, not all of which need to be satisfied.
Does there exist a threshold-signature scheme for Ed25519 that...
Does not require a trusted dealer to set ...
- 125
4
votes
2
answers
348
views
Would EdDSA be broken by replacing H(R, A, M) with H(A, M)?
An EdDSA signature is (R, S) where R = r*B and S = r + H(R, A, M)*s. Notation from Wikipedia en.wikipedia.org/wiki/EdDSA.
Given that the hash function H, is indeed collision-resistant, would using S = ...
- 375
3
votes
2
answers
338
views
Non interactive threshold signature without bilinear pairing (is it possible)?
All threshold signature schemes that I have seen need bilinear pairings to avoid parameter exchange between parties. These are normally commitment schemes for a certain secret.
I believe a 2-round ...
- 418
2
votes
0
answers
81
views
threshold signature scheme that allows adding and removing members
Is there a threshold signature scheme (TSS) that a quorum in a group can sign, where members can dynamically join and leave, without changing the shared group public key? ECDSA, BLS, and Schnorr based ...
- 185
2
votes
0
answers
195
views
Is there a Ed25519 threshold signature protocol similar to the Gennaro-Goldfeder schema for ECDSA?
I keep searching online and asking in different cryptographic communities whether there is a similar threshold signature schema (or a close one) to what Gennaro and Goldfeder proposed for ECDSA?
...
- 121
1
vote
1
answer
48
views
Does FROST threshold signing go well with BIP340?
FROST is a popular threshold signing protocol for Schnorr-style signatures.
BIP340 is a specification for an instantiation of a Schnorr-style signature scheme for Bitcoin Taproot. Specifically, they ...
- 697
1
vote
0
answers
98
views
Distributed Random Oracle with Verifiable Shares
$Setup$:
Let's assume a quorum of $n$ nodes where each have a secret share $y_i$ from a know and safe leaderless DKG protocol.
Define $\mathcal{L}^i(y_i) = y$ as the lagrange interpolation for $x=0$, ...
- 418