IETF Logo Mail Archive

Re: [Cfrg] Adoption of threshold drafts by RG

Jeff Burdges <burdges@gnunet.org> Wed, 30 September 2020 14:51 UTC

Return-Path: <burdges@gnunet.org>
X-Original-To: cfrg@ietfa.amsl.com
Delivered-To: cfrg@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 38BBD3A0D08 for <cfrg@ietfa.amsl.com>; Wed, 30 Sep 2020 07:51:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.958
X-Spam-Level:
X-Spam-Status: No, score=-0.958 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.274, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_SOFTFAIL=0.665] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rfQX8pLv2J6Z for <cfrg@ietfa.amsl.com>; Wed, 30 Sep 2020 07:51:22 -0700 (PDT)
Received: from mail-out1.informatik.tu-muenchen.de (mail-out1.in.tum.de [131.159.0.8]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8ED803A0CC3 for <cfrg@irtf.org>; Wed, 30 Sep 2020 07:51:18 -0700 (PDT)
Received: from [127.0.0.1] (sam.net.in.tum.de [IPv6:2001:4ca0:2001:42:225:90ff:fe6b:d60]) by sam.net.in.tum.de (Postfix) with ESMTP id C909F1C00D2; Wed, 30 Sep 2020 16:57:55 +0200 (CEST)
From: Jeff Burdges <burdges@gnunet.org>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.6\))
Date: Wed, 30 Sep 2020 16:51:09 +0200
References: <CAMm+Lwj8z0i56G7iTh-z7fZM5z5=B7-x63rVJjuWT7mC1x6x3w@mail.gmail.com> <CACsn0c=9SwWsJ=D_gAStP+gnbfmZkTEokESa0wunpBxaJPvn3g@mail.gmail.com> <CAMm+LwgZ_o28FaUHJ2JdivarT7a3vUdBTRDKa4YLajF93Gn3ag@mail.gmail.com> <76cfa2f5d3c04193aa28d153ce7d4958@uwaterloo.ca> <20200929203843.GY3842@yoink.cs.uwaterloo.ca>
To: Ian Goldberg <iang@uwaterloo.ca>, IRTF CFRG <cfrg@irtf.org>
In-Reply-To: <20200929203843.GY3842@yoink.cs.uwaterloo.ca>
Message-Id: <1A7BE772-12CD-4D84-9C24-0A337398FA58@gnunet.org>
X-Mailer: Apple Mail (2.3445.9.6)
Archived-At: <https://mailarchive.ietf.org/arch/msg/cfrg/lK03w3dbaK8JPmf_mAJtSGdV6lA>
Subject: Re: [Cfrg] Adoption of threshold drafts by RG
X-BeenThere: cfrg@irtf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Crypto Forum Research Group <cfrg.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/cfrg>, <mailto:cfrg-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cfrg/>
List-Post: <mailto:cfrg@irtf.org>
List-Help: <mailto:cfrg-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/cfrg>, <mailto:cfrg-request@irtf.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Sep 2020 14:51:28 -0000

Phillip,

It’s quite simple and basically free to delinearize the witnesses/nonces in a Schnorr multi-signature. 

I implemented witnesses delinearization in schnorrkel’s musig way back in early January https://github.com/w3f/schnorrkel/commit/fa6c35f832 after discussing it with numerous people in Fall 2019.  We’re not actually using witnesses delinearization in production right now, but only because our wallet folks move slowly. 

It works for threshold signatures too of course, so it appears FROST adopted roughly the same trick of delinearizing the witnesses in their recent version.  If threshold confuse matters then you should consider the simpler case of musig plus witnesses delinearization first.

If you want a multi-signer Schnorr protocol then you'll need either some form of witnesses delinearization or else some fancy determinism solution like MuSig-DN.

Best,
Jeff

v2.23.0 | Report a Bug | By Email