Details

Autor(en) / Beteiligte

• Damgård, Ivan
• Jakobsen, Thomas P
• Jesper Buus Nielsen
• Pagter, Jakob Illeborg
• Østergaard, Michael Bæksvang

Titel

Fast threshold ECDSA with honest majority

Ist Teil von

• Journal of computer security, 2022-01, Vol.30 (1), p.167

Ort / Verlag

Amsterdam: IOS Press BV

Erscheinungsjahr

2022

Quelle

Business Source Ultimate【Trial: -2024/12/31】【Remote access available】

Beschreibungen/Notizen

• ECDSA is a widely adopted digital signature standard. A number of threshold protocols for ECDSA have been developed that let a set of parties jointly generate the secret signing key and compute signatures, without ever revealing the signing key. Threshold protocols for ECDSA have seen recent interest, in particular due to the need for additional security in cryptocurrency wallets where leakage of the signing key is equivalent to an immediate loss of money. We propose a threshold ECDSA protocol secure against an active adversary in the honest majority model with abort. Our protocol is efficient in terms of both computation and bandwidth usage, and it allows the parties to pre-process parts of the signature, such that once the message to sign becomes known, they can compute a secret sharing of the signature very efficiently, using only local operations. We also show how to obtain guaranteed output delivery (and hence also fairness) in the online phase at the cost of some additional pre-processing work, i.e., such that it either aborts during the pre-processing phase, in which case nothing is revealed, or the signature is guaranteed to be delivered to all honest parties online.