Comments (2)
Private info (server side)
- Blinding key
$dk_i$ , a random scalarFr
, ("validator's private key") - Aggregated share
$Z_i$ , where$Z_i = dk_i^{-1} Y_i$ , (tpke::private_key_share
)
Public information
- Blinding public key
$ek_i$ , where$ek_i = dk_i H$ - Blinded aggregated share
$Y_i$ , where$Y_i = y_i\ ek_i = y_i\ dk_i H$ , (note that$Y_i$ is an aggregate from multiple PVSS)
Request
- Requester has ciphertext commitment
$U$ and sends it to servers - Each server returns two values:
- Decryption share
$D_i = e(U, Z_i)$ - Checksum value
$C_i = dk_i^{-1} U$
- Decryption share
- Requester uses
$D_i$ values to combine- If the combination is successful, congratulations.
- Otherwise, check 2 equations:
$D_i == e(C_i, Y_i)$ $e(C_i, ek_i) == e(U, H)$ - If both equations don't hold, server
$i$ returned an incorrect decryption share or checksum value.
Request - Light subvariant
- Requester has ciphertext commitment
$U$ and a scalar$\lambda$ , and sends it to servers - Each server returns two values:
- Decryption share
$D_i = e(\lambda \cdot U, Z_i)$ - Checksum value
$C_i = dk_i^{-1} U$
- Decryption share
- Requester uses
$D_i$ values to combine- If the combination is successful, congratulations.
- Otherwise, check 2 equations:
$D_i == e(\lambda \cdot C_i , Y_i)$ $e(C_i, ek_i) == e(U, H)$ - If both equations don't hold, server
$i$ returned an incorrect decryption share or checksum value.
from ferveo.
For pessimistic case see issue #36
from ferveo.
Related Issues (20)
- Get rid of g_inv and h_inv in the API HOT 2
- Decide on instructions for running Ferveo tests
- Replace deprecated `actions-rs/*` GH Actions
- Add header and payload to Ciphertext bindings HOT 7
- Derive `Eq` for `DkgPublicKey`
- Track domain points (aka "x coordinates") mapping to validators HOT 3
- Transcript epoch versioning HOT 1
- Protocol objects and methods for handling share updates between participants
- Design high-level protocols for refresh & recovery
- Rename group_threshold_cryptography crate to ferveo-tpke
- Delete references to ed25519
- Relax DKG ceremony constraints
- Expose `decrypt_private_key_share` to allow caching private key shares HOT 2
- Verifiability of Update Transcripts
- Add encryption to Update Transcripts HOT 2
- Aggregate transcript from a subset of participants HOT 2
- Expose `Ciphertext` methods in the Rust API
- Design protocol & related structures for onboarding and offboarding validators HOT 1
- Precomputed variant should work with a threshold number of shares and not need all of them HOT 2
- Share recovery failure at a random point when using new_decryption_share HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ferveo.