Cryptology ePrint Archive: Report 2020/084
Bandwidth-efficient threshold EC-DSA
Guilhem Castagnos and Dario Catalano and Fabien Laguillaumie and Federico Savasta and Ida Tucker
Abstract: Threshold Signatures allow n parties to share the power of issuing digital signatures so that any coalition of size at least (t+1) can sign, whereas groups of t or less players cannot. Over the last few years many schemes addressed the question of realizing efficient threshold variants for the specific case of EC-DSA signatures. In this paper we present new solutions to the problem that aim at reducing the overall bandwidth consumption. Our main contribution is a new variant of the Gennaro and Goldfeder protocol from ACM CCS 2018 that avoids all the required range proofs, while retaining provable security against malicious adver- saries in the dishonest majority setting. Our experiments show that – for all levels of security – our signing protocol reduces the bandwidth consumption of best previously known secure protocols for factors varying between 4.4 and 9, while key generation is consistently two times less expensive. Furthermore compared to these same protocols, our signature generation is faster for 192-bits of security and beyond.
Category / Keywords: cryptographic protocols / threshold signatures, ECDSA, class groups, bandwidth efficient
Original Publication (with minor differences): PKC 2020
Date: received 28 Jan 2020, last revised 9 Jul 2020
Contact author: ida tucker at ens-lyon fr
Available format(s): PDF | BibTeX Citation
Version: 20200709:114711 (All versions of this report)
Short URL: ia.cr/2020/084
[ Cryptology ePrint archive ]