search

ZenGo-X / multi-party-schnorr

Rust implementation of multi-party Schnorr signatures over elliptic curves.
GNU General Public License v3.0
170 stars 42 forks source link

Schnorr Blind Signature support? #33

Open Kelbie opened 4 years ago

Kelbie commented 4 years ago

Is there any support or planned support of Schnorr Blind Signatures?

omershlo commented 4 years ago

Good idea, do you have a specific protocol ?

Kelbie commented 4 years ago

I am working on implementing the Statechains protocol which requires Blind Schnorr so it would have to be compatible with bip-schnorr.

This thread may be of interest to anyone implementing the blinding. Edit: turns out the way they did it in Wasabi was not compatible with bip-schnorr.

Kelbie commented 4 years ago

Relevant thread on StackExchange about implementing blind schnorr that is compatible with bip-schnorr. Note that Greg Maxwell said that this implementation is insecure.

omershlo commented 4 years ago

thanks. I asked in the telegram group if someone wants to take this issue. let's see/ And - if Greg Maxwell says its insecure : it's insecure :)

burdges commented 4 years ago

There is an easy fix to the Wagner attacks in https://eprint.iacr.org/2019/877.pdf but not sure if/when adaptor signatures are secure, and I'm not sure when schnorr blind signatures really make sense.