Re: [Cfrg] Threshold signatures

[Tony Arcieri <[e-mail]>]

>
> At first blush, I’d think code signing could be accomplished with a set of
> Ed25519 signatures, no?


TUF[1] implements threshold signatures for codesigning this way. It's
simple and supports offline/airgapped signers, as opposed to a Schnorr-like
multisignature scheme which requires all of the signers be online. In
practice when multisignatures are leveraged in systems like this they're
almost always a 2-of-3 threshold signature, so using a multisignature saves
only 64-bytes.

[1]: https://theupdateframework.github.io/

-- 
Tony Arcieri