Open Nashtare opened 2 years ago
Yields a speed-up of ~85% for instance of t-out-of-n where t < 300.
Actually, this change introduces malleability in the signing phase that may be a problem. As pointed out in the FROST cfrg, this removes the guarantee that the set of signers that started round one of the protocol is the same set of signers that produced the signature output by round two. A detailed investigation is available at https://eprint.iacr.org/2022/833.pdf.
We should investigate if the improvement presented in https://eprint.iacr.org/2021/1375.pdf is worth integrating. (well it is but if we want to spend some time on it, as the main time consuming part is the DKG). As the signing phase of ICE FROST has not been changed from the original repo, deriving a common challenge for the signers should not pose any problem.