search

herumi / bls

288 stars 132 forks source link

Question about API for k-of-n threshold signature #94

Closed ghost closed 1 year ago

ghost commented 1 year ago

Hello! It's not really issue, more a question. In "API for k-of-n threshold signature" section the first action is Prepare k secret keys (msk). After some test I realized that the first key is the real master key which will be divided and others are more like "entropy" for polynomial/shares. So what is the reason to create them by ourself, what not to provide just one master key, but other parameters generate randomly?

herumi commented 1 year ago

Yes. https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing#Mathematical_formulation

The secret key is $a_0$, and the other random values are $a1, ..., a{k-1}$.