Abstract:
Threshold signatures enable any subgroup of t out of a committee of n participants to generate an aggregated signature. Although several (t,n)-threshold signature schemes exist, most of them assume that the threshold t and the set of participants do not change over time. Practical applications of threshold signatures (e.g. consensus algorithms and blockchain wallets) might benefit from the possibility of updating the threshold or the committee.
I will present Dynamic-FROST (D-FROST, for short), that combines FROST, a Schnorr threshold signature scheme, with CHURP, a dynamic proactive secret sharing scheme. The resulting protocol is the first Schnorr threshold signature scheme that accommodates changes in both the committee and the threshold value without relying on a trusted third party. D-FROST preserves the property of Existential Unforgeability under Chosen-Message Attack of the original signing scheme.
Il seminario si svolgerà in presenza presso il Dipartimento di Matematica e Fisica - Lungotevere Dante 376 - Aula M3
This post is also available in: Link identifier #identifier__30721-5Eng