Does/can this implement the Boneh/Drijvers/Neven BLS signature scheme? Or does this require extra steps to protect against rogue key attacks?

enzoh / go-bls

Boneh–Lynn–Shacham signature scheme.

https://crypto.stanford.edu/~dabo/pubs/abstracts/weilsigs.html

GNU General Public License v3.0

35 stars 12 forks source link

Does/can this implement the Boneh/Drijvers/Neven BLS signature scheme? Or does this require extra steps to protect against rogue key attacks? #7

Open SaleProperly opened 5 years ago

SaleProperly commented 5 years ago

Does/can this implement the Boneh/Drijvers/Neven BLS signature scheme? Or does this require extra steps to protect against rogue key attacks?

See https://crypto.stanford.edu/~dabo/pubs/papers/BLSmultisig.html

It describes an efficient BLS multi sig as well as a scheme resistant to rogue key attacks.

enzoh commented 5 years ago

Rogue key attacks are guarded by the distinct message requirement. If you want indistinct messages, then that paper would be the way to go. I welcome a PR for this.