forked from anoma/ferveo
-
Notifications
You must be signed in to change notification settings - Fork 11
Relax DKG ceremony constraints #170
Copy link
Copy link
Closed
Description
- Currently, DKG supports n-of-m parameters. Notice that
n, or the security threshold, has nothing to do with the actual ceremony - The threshold only comes into play in the "phase 2" of Ferveo, which is where we generate "a threshold" of decryption shares, and combine them to decrypt. - When under relaxed ceremony constraints, instead of "m" shares we allow for [m,
validators.len()] shares to be created in a ceremony. Meaning that the number of validators (and shares created) could be different than the minimum number of shares required by the PVSS. So we only needmshares to have a successful ceremony - In this new regime, the old
shares_numis effectively replaced byvalidators.len(), and from now onshares_numdenotes the minimum number of shares (or validators) that the DKG ceremony accommodates - This change will require updates to PVSS dealing and PVSS aggregation & verification
CC: @cygnusv
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels