Threshold ECDSA with an Offline Recovery Party
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2020
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866908777175842816 |
|---|---|
| author | Battagliola, Michele Longo, Riccardo Meneghetti, Alessio Sala, Massimiliano |
| author_facet | Battagliola, Michele Longo, Riccardo Meneghetti, Alessio Sala, Massimiliano |
| contents | A $(t,n)-$ threshold signature scheme enables distributed signing among $n$ players such that any subgroup of size $t$ can sign, whereas any group with fewer players cannot. Our goal is to produce signatures that are compatible with an existing centralized signature scheme: the key generation and signature algorithm are replaced by a communication protocol between the parties, but the verification algorithm remains identical to that of a signature issued using the centralized algorithm. Starting from the threshold schemes for the ECDSA signature due to R. Gennaro and S. Goldfeder, we present the first protocol that supports multiparty signatures with an offline participant during the Key Generation Phase, without relying on a trusted third party. Following well-established approaches, we prove our scheme secure against adaptive malicious adversaries. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2007_04036 |
| institution | arXiv |
| publishDate | 2020 |
| record_format | arxiv |
| spellingShingle | Threshold ECDSA with an Offline Recovery Party Battagliola, Michele Longo, Riccardo Meneghetti, Alessio Sala, Massimiliano Cryptography and Security A $(t,n)-$ threshold signature scheme enables distributed signing among $n$ players such that any subgroup of size $t$ can sign, whereas any group with fewer players cannot. Our goal is to produce signatures that are compatible with an existing centralized signature scheme: the key generation and signature algorithm are replaced by a communication protocol between the parties, but the verification algorithm remains identical to that of a signature issued using the centralized algorithm. Starting from the threshold schemes for the ECDSA signature due to R. Gennaro and S. Goldfeder, we present the first protocol that supports multiparty signatures with an offline participant during the Key Generation Phase, without relying on a trusted third party. Following well-established approaches, we prove our scheme secure against adaptive malicious adversaries. |
| title | Threshold ECDSA with an Offline Recovery Party |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2007.04036 |