boltlabs-inc / tss-ecdsa

An implementation of a threshold ECDSA signature scheme
Other
12 stars 5 forks source link

Handle known identifiable abort cases in presign #485

Open marsella opened 1 year ago

marsella commented 1 year ago

In #410 we added identifiable abort to keygen and auxinfo, but skipped presign. We skipped it because in order to do identifiable abort correctly in the Output round, we need extra proofs and rounds of communication, which is too big to do in that issue. However, in rounds 1-3, we can identify cheaters. This applies for any protocol error that happens due to consistency failures (a sent value doesn't match a value we have) or a failure to decrypt messages received from other parties.

Note: This also applies to proof validation failures, but that requires additional infrastructure that will be handled in a separate issue.