https://github.com/tangle-network/cggmp-threshold-ecdsa
MPC protocols for threshold ECDSA
https://github.com/tangle-network/cggmp-threshold-ecdsa
cryptography mpc multi-party-computation threshold-cryptography threshold-ecdsa
Last synced: about 1 year ago
JSON representation
MPC protocols for threshold ECDSA
- Host: GitHub
- URL: https://github.com/tangle-network/cggmp-threshold-ecdsa
- Owner: tangle-network
- License: gpl-3.0
- Created: 2022-09-25T16:23:22.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-02-06T15:11:34.000Z (about 2 years ago)
- Last Synced: 2024-10-10T05:29:14.640Z (over 1 year ago)
- Topics: cryptography, mpc, multi-party-computation, threshold-cryptography, threshold-ecdsa
- Language: Rust
- Homepage:
- Size: 1.78 MB
- Stars: 45
- Watchers: 4
- Forks: 10
- Open Issues: 12
-
Metadata Files:
- Readme: README.md
- Contributing: .github/CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
README
🚀 CGGMP Threshold ECDSA Distributed Key Generation Protocol 🔑
[](https://github.com/webb-tools/cggmp-threshold-ecdsa/actions) [](https://codecov.io/gh/webb-tools/cggmp-threshold-ecdsa) [](https://www.gnu.org/licenses/gpl-3.0) [](https://twitter.com/webbprotocol) [](https://t.me/webbprotocol) [](https://discord.gg/cv8EfJu3Tn)
📖 Table of Contents
Table of Contents
Getting Started 🎉
**This repo is research-oriented software and should not be considered SAFE to use in production. It has not been audited and/or tested rigorously yet. Please use caution.**
This is an implementation of the threshold ECDSA signature multi-party-computation from [UC Non-Interactive, Proactive, Threshold ECDSA with Identifiable Aborts](https://eprint.iacr.org/2021/060) with slight modifications. We implement this MPC using the key generation protocol originally from [GG20](https://eprint.iacr.org/2020/540) and implemented by [Zengo](https://github.com/ZenGo-X) in [multi-party-ecdsa](https://github.com/ZenGo-X/multi-party-ecdsa).
For the key refresh protocol we opt for a fork of Zengo's [fs-dkr](https://github.com/webb-tools/fs-dkr) maintained by us. Together, these complete the key generation and key refreshing protocol. From here, we implement the pre-signing and signing protocols outlined in the aforementioned CGGMP paper. This implementation leverages the infrastructure built by Zengo, namely [round-based-protocol](https://github.com/ZenGo-X/round-based-protocol). We detail how this can be used in a blockchain's gossip network environment such as Substrate, as that motivates this work.
Particularly, we have implemented the **4-round $O(n^2)$ identifiable abort** version of CGGMP. The **remaining work to be done is testing** our implementation, particularly the `presign` and `sign`.
Implementation checklist
- [x] Key generation [multi-party-ecdsa](https://github.com/ZenGo-X/multi-party-ecdsa).
- [x] Key generation tests
- [x] Key refresh [fs-dkr](https://github.com/webb-tools/fs-dkr)
- [x] Key refresh tests
- [x] Adding Ring Pedersen parameters to `fs-dkr`.
- [x] Implementing all ZKPs for **4-round $O(n^2)$ identifiable abort**
- [ ] Implementing **4-round $O(n^2)$ identifiable abort** `presign` and `sign`.
- [ ] Properly zeroizing the `PresignOutput` [link to code](https://github.com/webb-tools/cggmp-threshold-ecdsa/blob/main/src/presign/mod.rs#L66).
- [ ] Properly implement identifiable abort proof 2c) in both `presign` and `sign` [link to presign code](https://github.com/webb-tools/cggmp-threshold-ecdsa/blob/main/src/presign/rounds.rs#L939) [link to sign code](https://github.com/webb-tools/cggmp-threshold-ecdsa/blob/main/src/sign/rounds.rs#L318).
- [ ] Testing **4-round $O(n^2)$ identifiable abort** `presign` and `sign`.
- [ ] Implementing all ZKPs for **7-round $O(n)$ identifiable abort**
- [ ] `aff-p`
- [ ] `enc-elg`
- [ ] `aff-p`
- [ ] `elog`
- [ ] `Nth`
- [ ] `log`
- [ ] Implementing **7-round $O(n)$ identifiable abort** `presign` and `sign`.
- [ ] Entire protocol unimplemented (refer to CGGMP paper for details + taurus-group implementation)[taurus group code](https://github.com/taurusgroup/multi-party-sig/tree/main/protocols/cmp).
- [ ] Testing **7-round $O(n)$ identifiable abort** `presign` and `sign`.
## Prerequisites
This guide uses installer and the `rustup` tool to manage the Rust toolchain.
First install and configure `rustup`:
```bash
# Install
curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
# Configure
source ~/.cargo/env
```
Configure the Rust toolchain to default to the latest stable and nightly versions:
```bash
rustup update
rustup update nightly
```
Great! Now your Rust environment is ready! 🚀🚀
## Installation 💻
Once the development environment is set up, build the repo. This command will build the MPC protocol:
```bash
cargo build --release
```
> NOTE: You _do not need_ to use the release builds! Debug builds can work here as well.
Usage
Quick Start ⚡
Check out the tests for examples on how to utilise the library!
Integration into Substrate
A main motivation for Webb is integrating this protocol into a blockchain environment such as Substrate. Our intention is to leverage both a blockchain's proof of stake / proof of authority selection mechanism as well as the underlying system's gossip network to bootstrap and execute this multi-party computation offchain. Throughout the lifecycle of the protocol, the participating MPC authorities will post data on-chain to keep the system in sync, such as to select the participating authorities, to govern the thresholds `t` and `n` and more.
An example of how this is possible using the same primitives provided in this repo can be found in our [dkg-substrate](https://github.com/webb-tools/dkg-substrate) repo. Currently the GG20 protocol is being executed. There are wrappers in place for executing any protocol using the [round-based-protocol](https://github.com/ZenGo-X/round-based-protocol) architecture. Slight modifications might be necessary and we aim to have this repo integrated into Substrate once it is working and tested here.
External Networking
Not included in this library is a server-oriented execution protocol. There are examples of how this can be done using GG20 in [multi-party-ecdas](https://github.com/ZenGo-X/multi-party-ecdsa/tree/master/examples). We welcome contributions to add a similar example here, but at the moment it will not be prioritized.
There are a variety of other external networking options one can choose between such as point-to-point channels, gossip networks, and or gRPC server coordinators. Each has different trade-offs. Point-to-point channels and gRPC server coordination allow one to run this protocol in the most simple manner, since the network topology is effectively decided on startup. In a gossip network environment this isn't always the case, therefore gossiping and re-gossiping messages using a method such as [gossipsub](https://github.com/libp2p/specs/blob/master/pubsub/gossipsub/gossipsub-v1.1.md) from [libp2p](https://libp2p.io/) is recommended.
Testing 🧪
The following instructions outlines how to run dkg-substrate's base test suite and E2E test suite.
### To run base tests
```
cargo test
```
Contributing
Interested in contributing to the Webb's MPC research? Thank you so much for your interest! We are always appreciative for contributions from the open-source community!
If you have a contribution in mind, please check out our [Contribution Guide](./.github/CONTRIBUTING.md) for information on how to do so. We are excited for your first contribution!
License
Licensed under GNU General Public License v3.0.
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this crate by you, as defined in the GNU General Public License v3.0 license, shall be licensed as above, without any additional terms or conditions.