Paper 2024/2011
Honest-Majority Threshold ECDSA with Batch Generation of Key-Independent Presignatures
Abstract
Several protocols have been proposed recently for threshold ECDSA signatures, mostly in the dishonest-majority setting. Yet in so-called key-management networks, where a fixed set of servers share a large number of keys on behalf of multiple users, it may be reasonable to assume that a majority of the servers remain uncompromised, and in that case there may be several advantages to using an honest-majority protocol. With this in mind, we describe an efficient protocol for honest-majority threshold ECDSA supporting batch generation of key-independent presignatures that allow for "non-interactive'" online signing; these properties are not available in existing dishonest-majority protocols. Our protocol offers low latency and high throughput, and runs at an amortized rate of roughly 1.3 ms/presignature.
Metadata
- Available format(s)
-
PDF
- Category
- Cryptographic protocols
- Publication info
- Preprint.
- Keywords
- threshold cryptographyECDSA
- Contact author(s)
-
jkatz2 @ gmail com
antoine urban @ telecom-paris fr - History
- 2024-12-12: revised
- 2024-12-12: received
- See all versions
- Short URL
- https://ia.cr/2024/2011
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2024/2011,
author = {Jonathan Katz and Antoine Urban},
title = {Honest-Majority Threshold {ECDSA} with Batch Generation of Key-Independent Presignatures},
howpublished = {Cryptology {ePrint} Archive, Paper 2024/2011},
year = {2024},
url = {https://eprint.iacr.org/2024/2011}
}
