jesseposner

• polynomial nonces okay because you need honest majority anyway for BFT consensus
• PoK/commit-reveal could be better than noncehash for better flexibility (or noncehash that doesn't commit to signing set or message)
• stinsons and strobl only has proof for passive adversary
• do we want to commit to the FROST group key explictly in the sig with a tweak?

jesseposner

Refactor Proposal: Split FROST Share Generation into Two Operations

Motivation

The current implementation of the secp256k1_frost_share_gen function combines the generation of Verifiable Secret Sharing (VSS) coefficient commitments and the generation of shares. This proposal aims to split these two operations into separate functions, which will provide a safer and more flexible API.

Motivations for this refactor include:

1. The session_id parameter was confusing and easy to misuse.
2. The FROST paper requires coefficient commitments and a proof-of-knowledge for the first commitment be distributed prior to shares. This change updates the APIs to conform to the paper specification, which it did not before.

jesseposner

L2 MultiSig Meeting Agenda - 03-21-23

Nonces

Verifiable Encryption Schemes

• Cut-and-Choose
• Juggling

Revocation Secrets

jesseposner

Running Bitcoin Valgrind Tests on macOS with Docker

Getting Valgrind running on macOS can be tricky. One of the easiest methods is to use Louis Brunner's patch, however, Big Sur is not currently supported.

Instead, we can use Docker to run Valgrind from within a virtualized Ubuntu environment.

Installing Docker

You can install Docker Desktop by using homebrew:

jesseposner

Keybase proof

I hereby claim:

• I am jesseposner on github.
• I am jesseposner (https://keybase.io/jesseposner) on keybase.
• I have a public key whose fingerprint is BC96 C50E B11F 7F77 3A3D 8952 89C1 CAEA 48DA 9E05

To claim this, I am signing this object: