Bandwidth-Efficient Threshold EC-DSA - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2020

Bandwidth-Efficient Threshold EC-DSA


Threshold Signatures allow n parties to share the power of issuing digital signatures so that any coalition of size at least t+1 can sign, whereas groups of t or less players cannot. Over the last few years many schemes addressed the question of realizing efficient threshold variants for the specific case of EC-DSA signatures. In this paper we present new solutions to the problem that aim at reducing the overall bandwidth consumption. Our main contribution is a new variant of the Gennaro and Goldfeder protocol from ACM CCS 2018 that avoids all the required range proofs, while retaining provable security against malicious adversaries in the dishonest majority setting. Our experiments show that-for all levels of security-our signing protocol reduces the bandwidth consumption of best previously known secure protocols for factors varying between 4.4 and 9, while key generation is consistently two times less expensive. Furthermore compared to these same protocols, our signature generation is faster for 192-bits of security and beyond.
Fichier principal
Vignette du fichier
PKC20_mpECDSA_extended.pdf (624.58 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-02944825 , version 1 (21-09-2020)



Guilhem Castagnos, Dario Catalano, Fabien Laguillaumie, Federico Savasta, Ida Tucker. Bandwidth-Efficient Threshold EC-DSA. PKC 2020 - 23rd IACR International Conference on Practice and Theory of Public-Key Cryptography, Jun 2020, Edinburgh / Virtual, United Kingdom. pp.266-296, ⟨10.1007/978-3-030-45388-6_10⟩. ⟨hal-02944825⟩
134 View
389 Download



Gmail Mastodon Facebook X LinkedIn More