bnb-chain / tss-lib

Threshold Signature Scheme, for ECDSA and EDDSA
MIT License
790 stars 271 forks source link

Is Schnorr scheme used in ECDSA? #235

Open wy0sq opened 1 year ago

wy0sq commented 1 year ago

I noticed that eddsa includes a Schnorr proof, but there doesn't seem to in esdsa. I would like to know whether the esdsa scheme has a proof of "holding the private key of the broadcast ecdsa shard public key".

Does this code in tss-lib implement the Schnorr proof for this ecdsaPubKey:

round.save.PaillierSK.Proof(ki, ecdsaPubKey)

ppk := round.save.PaillierPKs[j]
ok, err := prf. Verify(ppk. N, PIDs[j], ecdsaPub)