Simple Schnorr multi-signatures with applications to bitcoin

DOI10.1007/s10623-019-00608-xzbMath1419.94043OpenAlexW2794784663MaRDI QIDQ2324793

Andrew Poelstra, Yannick Seurin, Gregory Maxwell, Pieter Wuille

Publication date: 12 September 2019

Published in: Designs, Codes and Cryptography (Search for Journal in Brave)

Full work available at URL: https://doi.org/10.1007/s10623-019-00608-x

zbMATH Keywords

discrete logarithm problemforking lemmabitcoinSchnorr signatureskey aggregationmulti-signatures

Mathematics Subject Classification ID

Algebraic coding theory; cryptography (number-theoretic aspects) (11T71) Cryptography (94A60)

Related Items (32)

Threshold Schnorr with stateless deterministic signing from standard assumptions ⋮ Two-round trip Schnorr multi-signatures via delinearized witnesses ⋮ MuSig2: simple two-round Schnorr multi-signatures ⋮ Non-interactive half-aggregation of EdDSA and variants of Schnorr signatures ⋮ FROST: Flexible round-optimized Schnorr threshold signatures ⋮ Round Optimal Secure Multisignature Schemes from Lattice with Public Key Aggregation and Signature Compression ⋮ Impact of Group Theory in Cryptosystem ⋮ The multi-base discrete logarithm problem: tight reductions and non-rewinding proofs for Schnorr identification and signatures ⋮ Decentralized asset custody scheme with security against rational adversary ⋮ Robust subgroup multi-signatures for consensus ⋮ On the multi-user security of short Schnorr signatures with preprocessing ⋮ A Novel Certificateless Multi-signature Scheme over NTRU Lattices ⋮ The One-More Discrete Logarithm Assumption in the Generic Group Model ⋮ Chain Reductions for Multi-signatures and the HBMS Scheme ⋮ A novel identity-based multi-signature scheme over NTRU lattices ⋮ Chopsticks: fork-free two-round multi-signatures from non-interactive assumptions ⋮ Cryptanalysis of a round optimal lattice-based multisignature scheme ⋮ MuSig-L: lattice-based multi-signature with single-round online phase ⋮ Multi-signatures for ECDSA and its applications in blockchain ⋮ SR-MuSig2: a scalable and reconfigurable multi-signature scheme and its applications ⋮ Threshold signatures with private accountability ⋮ Two-round stateless deterministic two-party Schnorr signatures from pseudorandom correlation functions ⋮ Fully adaptive Schnorr threshold signatures ⋮ \textsf{DualMS}: efficient lattice-based two-round multi-signature with trapdoor-free simulation ⋮ On the (in)security of ROS ⋮ Two-round \(n\)-out-of-\(n\) and multi-signatures and trapdoor commitment from lattices ⋮ Two-round \(n\)-out-of-\(n\) and multi-signatures and trapdoor commitment from lattices ⋮ On the (in)security of ROS ⋮ Two-party adaptor signatures from identification schemes ⋮ A secure cross-chain transaction model based on quantum multi-signature ⋮ ATSSIA: asynchronous truly-threshold Schnorr signing for inconsistent availability ⋮ Blind Schnorr signatures and signed ElGamal encryption in the algebraic group model

Uses Software

• GitHub

Cites Work

• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Unnamed Item
• Efficient discrete logarithm based multi-signature scheme in the plain public key model
• Efficient signature generation by smart cards
• The one-more-RSA-inversion problems and the security of Chaum's blind signature scheme
• Security arguments for digital signatures and blind signatures
• Compact multi-signatures for smaller blockchains
• Short signatures from the Weil pairing
• An efficient lattice-based multisignature scheme with applications to bitcoins
• Threshold-Optimal DSA/ECDSA Signatures and an Application to Bitcoin Wallet Security
• Optimal Security Proofs for Signatures from Identification Schemes
• On the Exact Security of Schnorr-Type Signatures in the Random Oracle Model
• High-Speed High-Security Signatures
• Weaknesses in Some Threshold Cryptosystems
• Sequential Aggregate Signatures and Multisignatures Without Random Oracles
• Improved Bounds on Security Reductions for Discrete Log Based Signatures
• Group-oriented (t, n) threshold digital signature scheme and digital multisignature
• Threshold Signatures, Multisignatures and Blind Signatures Based on the Gap-Diffie-Hellman-Group Signature Scheme
• Advances in Cryptology - EUROCRYPT 2004
• Unrestricted Aggregate Signatures
• The Power of Proofs-of-Possession: Securing Multiparty Signatures against Rogue-Key Attacks
• Discrete-Log-Based Signatures May Not Be Equivalent to Discrete Log
• Escrow Protocols for Cryptocurrencies: How to Buy Physical Goods Using Bitcoin
• Fast secure two-party ECDSA signing

This page was built for publication: Simple Schnorr multi-signatures with applications to bitcoin