[Cfrg] New Version Notification for draft-komlo-frost-00.txt

[Chelsea Komlo <[e-mail]>]

All,


We posted our -00 draft for FROST, a Flexible Round Optimized Schnorr Threshold Signature scheme. This draft reflects our updated FROST construction [1].


FROST improves upon prior constructions as it can be used as a single-round signing protocol with preprocessing, while remaining safe against known forgery attacks that are applicable to prior schemes in the literature [2].


Please let us know if there are any questions. We look forward to this draft being considered for adoption as a work item.


Chelsea


[1] https://eprint.iacr.org/2020/852

[2] https://eprint.iacr.org/2018/417



________________________________
From: [e-mail] <[e-mail]>
Sent: Friday, August 7, 2020 6:53 AM
To: Ian Goldberg; Chelsea Komlo
Subject: New Version Notification for draft-komlo-frost-00.txt


A new version of I-D, draft-komlo-frost-00.txt
has been successfully submitted by Chelsea Komlo and posted to the
IETF repository.

Name:           draft-komlo-frost
Revision:       00
Title:          FROST: Flexible Round-Optimized Schnorr Threshold Signatures
Document date:  2020-08-07
Group:          Individual Submission
Pages:          22
URL:            https://www.ietf.org/internet-drafts/draft-komlo-frost-00.txt
Status:         https://datatracker.ietf.org/doc/draft-komlo-frost/
Htmlized:       https://tools.ietf.org/html/draft-komlo-frost-00
Htmlized:       https://datatracker.ietf.org/doc/html/draft-komlo-frost
draft-komlo-frost-00<https://datatracker.ietf.org/doc/html/draft-komlo-frost>
datatracker.ietf.org
FROST: Flexible Round-Optimized Schnorr Threshold Signatures (Internet-Draft, 2020)





Abstract:
   Unlike signatures in a single-party setting, threshold signatures
   require cooperation among a threshold number of signers each holding
   a share of a common private key.  Consequently, generating signatures
   in a threshold setting imposes overhead due to network rounds among
   signers, proving costly when secret shares are stored on network-
   limited devices or when coordination occurs over unreliable networks.
   This draft describes FROST, a Flexible Round-Optimized Schnorr
   Threshold signature scheme that reduces network overhead during
   signing operations while employing a novel technique to protect
   against forgery attacks applicable to similar schemes in the
   literature.  FROST improves upon the state of the art in Schnorr
   threshold signature protocols, as it can safely perform signing
   operations in a single round without limiting concurrency of signing
   operations, yet allows for true threshold signing, as only a
   threshold number of participants are required for signing operations.
   FROST can be used as either a two-round protocol where signers send
   and receive two messages in total, or optimized to a single-round
   signing protocol with a pre-processing stage.  FROST achieves its
   efficiency improvements in part by allowing the protocol to abort in
   the presence of a misbehaving participant (who is then identified and
   excluded from future operations)--a reasonable model for practical
   deployment scenarios.




Please note that it may take a couple of minutes from the time of submission
until the htmlized version and diff are available at tools.ietf.org.

The IETF Secretariat