Practical threshold signatures

Practical threshold signatures

发表信息

• 原文链接

作者

• Victor Shoup

笔记

We present an RSA threshold signature scheme. The scheme enjoys the following properties:

1. it is unforgeable and robust in the random oracle model, assuming the RSA problem is hard;
2. signature share generation and verification is completely non-interactive;
3. the size of an individual signature share is bounded by a constant times the size of the RSA modulus.

我们提出了一种RSA门限签名方案。该方案具有以下特性：

1. 在随机 oracle 模型下是不可伪造的，并且在假设RSA问题是困难的情况下是稳健的；
2. 签名份额的生成和验证完全是非交互式的；
3. 单个签名份额的大小由一个常数乘以RSA模数的大小所界定。