Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.


Distributed Key Generation in the Discrete-Logarithm Setting

September 26, 2023


Jonathan Katz - Dfns


Abstract. Protocols for distributed key generation (DKG) in the discrete-logarithm setting (as used by, e.g., threshold ECDSA and threshold EdDSA protocols) have received a lot of attention in the past few years. But it can be difficult to determine when some DKG protocol is suitable for a particular threshold protocol due in part to the complexity of some of the DKG security notions that have been used to analyze those protocols. In this presentation, we suggest to manage this complexity by (1) separately standardizing DKG protocols and threshold signing/encryption protocols, to ensure modularity between the two; and (2) using a simulation-based approach to defining security for DKG protocols, so that different security guarantees can be cleanly expressed via different ideal functionalities. We exemplify this approach by suggesting a number of possible ideal functionalities for DKG. Moreover, we observe that most synchronous DKG protocols are not robust in that they allow even a single malicious party to prevent successful generation of a key. We highlight robustness as an important property for threshold protocols, in general, and propose an efficient, 2-round protocol for robust distributed key generation in the honest-majority setting.

[Slides] [Video]

Presented at

MPTS 2023: NIST Workshop (virtual) on Multi-Party Threshold Schemes 2023

Event Details



Related Topics

Security and Privacy: cryptography

Created September 21, 2023, Updated October 25, 2023