@@ -7,7 +7,7 @@ FROST is a threshold Schnorr signature scheme
7
7
[ invented] ( https://eprint.iacr.org/2020/852 ) by Chelsea Komlo (researcher at the
8
8
Zcash Foundation) and Ian Goldberg, and in the process of becoming an [ IETF
9
9
RFC] ( https://datatracker.ietf.org/doc/draft-irtf-cfrg-frost/ ) . Threshold
10
- signatures allows a private key being split into shares given to multiple
10
+ signatures allow a private key being split into shares given to multiple
11
11
participants, allowing a subgroup of them (e.g. 3 out of 5, or whatever
12
12
threshold specified at key generation) to generate a signature that can be
13
13
verified by the group public key, as if it were signed by the original unsplit
@@ -26,8 +26,8 @@ When we presented FROST at Zcon 3, we were asked how FROST performed in larger
26
26
settings, such as a 667-of-1000 signers. (This is motivated by a mechanism
27
27
proposed by Christopher Goes for [ bridging Zcash with other ecosystems using
28
28
FROST] ( https://forum.zcashcommunity.com/t/proposed-architecture-for-a-zcash-namada-ibc-ecosystem-ethereum-ecosystem-non-custodial-bridge-using-frost-multisignatures/42749 ) .)
29
- We set out to benchmark our Rust implementation, and I was a bit surprised about
30
- one particular step, “Aggregate”.
29
+ We set out to benchmark our Rust implementation, and were a bit surprised about
30
+ one particular step: “Aggregate”.
31
31
32
32
The FROST scheme can be split into steps. The first one is Key Generation, which
33
33
only needs to be done once, while the rest are carried out each time the group
@@ -52,7 +52,7 @@ number), but the Aggregate timings appeared too high, surpassing 400ms for the
52
52
667-of-1000 case (which may not seem much but it’s unusual for a signing
53
53
procedure).
54
54
55
- I intended to investigate this but I didn’t even need to . Coincidentally, while
55
+ We intended to investigate this but it was not necessary . Coincidentally, while
56
56
the RFC was in the last call for feedback, Tim Ruffing [ pointed
57
57
out] ( https://mailarchive.ietf.org/arch/msg/cfrg/QQhyjvvcoaqLslaX3gWwABqHN-s/ )
58
58
that Aggregate can be sped up significantly. Originally, it was specified that
0 commit comments