All Questions
Tagged with threshold-cryptography discrete-logarithm
3 questions
2
votes
0
answers
129
views
Distributed key generation (for discrete-log based cryptosystems) with fake shares
Under the definition of Gennaro et al (link), a DKG protocol needs to satisfy “correctness” and “secrecy”. Correctness is divided into three sub-properties:
C1. All subsets of $t+1$ shares provided ...
- 128
6
votes
1
answer
916
views
Elliptic curves with pairings at 128-bit security in libpbc?
I am using Ben Lynn's libpbc to implement a BLS threshold signature scheme and I am aiming for 128-bit security (i.e., a forgery attack should take around $2^{128}$ ...
- 1,022
4
votes
1
answer
215
views
NIZK Proof of knowledge N of M discrete logarithms (threshold)
It is well known how to produce a NIZK that curvepoints $aG$ and $aP$ have the same discrete logarithm $a$ with respect to the curvepoints they are multiplied by. There is also a way to prove that a ...
- 437