From TS-SUF-2 to TS-SUF-4: Practical Security Enhancements for FROST2 Threshold Signatures
FROST2+ adds pre-processing token verification to lift the FROST2 threshold Schnorr scheme to TS-SUF-4 security with comparable performance.
Bellare et al. (CRYPTO 2022) showed FROST2 achieves only TS-SUF-2 unforgeability under the one-more discrete logarithm assumption with static corruption and centralized key generation, due to TS-UF-3 attacks. The authors propose FROST2+, which integrates pre-processing token verifications to achieve TS-SUF-4 security under the same assumptions. The result also holds when initialized with distributed key generation such as PedPoP. Benchmarks on Zcash's FROST library show FROST2+ performs comparably to FROST2 and is about 64-79% faster than FROST when precomputation is enabled.
- FROST2 achieves only TS-SUF-2 security due to TS-UF-3 attacks
- FROST2+ reaches TS-SUF-4 under the same one-more discrete logarithm assumption
- Security holds with centralized key generation and PedPoP DKG
- 64-79% faster than FROST with precomputation on Zcash's library
From the original article
1 min read at arxiv.orgThreshold signature schemes play a vital role in securing digital assets within blockchain and distributed systems. FROST2 stands out as a practical threshold Schnorr signature scheme, noted for its efficiency and compatibility with standard verification processes.
By Will Wang · arxiv.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.