Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Frost signature coordinator randomization (anti-exfil) #204

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

LLFourn
Copy link
Owner

@LLFourn LLFourn commented Jan 28, 2025

[❄] Allow for FROST signature randomization
Creates another session creation method that takes an rng. This ensures
that the final nonce R (and by implication the s) in the signature will
be indistinguishable from random even to all those who knew the
parameters ahead of time. This stops signers from contriving the final
nonce even if they are all corrupt.

Dunno how I missed this before. Also forgot to add the constraints on Out.
Sometimes it's useful to have a possibly zero keypair.
@LLFourn LLFourn force-pushed the FROST-randomization branch from a3518b1 to aca7257 Compare January 28, 2025 03:07
@LLFourn LLFourn changed the title Frost randomization Frost randomization (anti-exfil) Jan 28, 2025
@LLFourn LLFourn changed the title Frost randomization (anti-exfil) Frost signature coordinator randomization (anti-exfil) Jan 28, 2025
LLFourn added a commit to frostsnap/frostsnap that referenced this pull request Jan 28, 2025
LLFourn added a commit to frostsnap/frostsnap that referenced this pull request Jan 28, 2025
@LLFourn LLFourn force-pushed the FROST-randomization branch from aca7257 to 5e3f460 Compare January 29, 2025 11:57
LLFourn added a commit to frostsnap/frostsnap that referenced this pull request Jan 29, 2025
@LLFourn LLFourn force-pushed the FROST-randomization branch from 5e3f460 to a8b5c36 Compare January 29, 2025 22:59
LLFourn added a commit to frostsnap/frostsnap that referenced this pull request Jan 29, 2025
Creates another session creation method that takes an rng. This ensures
that the final nonce R (and by implication the s) in the signature will
be indistinguishable from random even to all those who knew the
parameters ahead of time. This stops signers from contriving the final
nonce even if they are all corrupt.
@LLFourn LLFourn force-pushed the FROST-randomization branch from a8b5c36 to 1f739e0 Compare January 29, 2025 23:01
LLFourn added a commit to frostsnap/frostsnap that referenced this pull request Jan 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant