Cryptology ePrint Archive: Report 2020/084

Bandwidth-efficient threshold EC-DSA

Guilhem Castagnos and Dario Catalano and Fabien Laguillaumie and Federico Savasta and Ida Tucker

Abstract: Threshold Signatures allow n parties to share the power of issuing digital signatures so that any coalition of size at least (t+1) can sign, whereas groups of t or less players cannot. Over the last few years many schemes addressed the question of realizing efficient threshold variants for the specific case of EC-DSA signatures. In this paper we present new solutions to the problem that aim at reducing the overall bandwidth consumption. Our main contribution is a new variant of the Gennaro and Goldfeder protocol from ACM CCS 2018 that avoids all the required range proofs, while retaining provable security against malicious adver- saries in the dishonest majority setting. Our experiments show that – for all levels of security – our signing protocol reduces the bandwidth consumption of best previously known secure protocols for factors varying between 4.4 and 9, while key generation is consistently two times less expensive. Furthermore compared to these same protocols, our signature generation is faster for 192-bits of security and beyond.

Category / Keywords: cryptographic protocols / threshold signatures, ECDSA, class groups, bandwidth efficient

Original Publication (with major differences): PKC 2020

Date: received 28 Jan 2020

Contact author: ida tucker at ens-lyon fr

Available format(s): PDF | BibTeX Citation

Version: 20200128:151246 (All versions of this report)

Short URL: ia.cr/2020/084