search

coinbase / kryptology

Apache License 2.0
847 stars 123 forks source link

FROST with Secp256k1 #46

Closed aidenrb closed 2 years ago

aidenrb commented 2 years ago

Is it possible to use FROST tss with secp256k1 curve? I saw in the code that it requires just a generic curve implementation, but it also requires Challenge Deriver when creating a signer and is labeled under ted25519.

mikelodder7 commented 2 years ago

Yes it is. FROST generates a Schnorr signature so the only difference that is required is the challenge deriver or how the c value is computed. Bitcoin taproot requires using SHA256 with certain tag prefixes. Ed25519 uses SHA512. Mina uses Poseidon. If you want to have a basic proof of concept, you could just use SHA256 for the three inputs.

lfzkoala commented 2 years ago

Yes, you can define a challenge deriver using secp256k1 curve abstraction to do this, which should be similar the existing ed25519 challenge deriver.