"Preview Talk" (by team Octopus) @ TCPT3, in reply to the NIST Threshold Call
Abstract: In this presentation, we will present two lattice-based two-round threshold signature schemes supporting general t-out-of-n access structures for the NIST Multi-Party Threshold Cryptography Call. The first scheme, TalonG, targets large-scale threshold settings and focuses on reducing per-party communication overhead. It follows the Raccoon signature framework and its threshold variants, and uses Shamir secret sharing in a trusted-dealer setup. The second scheme, P-DualTS, targets small-party deployments and focuses on compact public keys, short signatures, and efficient communication. It follows the ML-DSA signature framework and recent threshold constructions, and uses replicated secret sharing in a trusted-dealer setup. Both schemes provide post-quantum security under standard lattice assumptions and target Category S1: [Special] Signing of the NIST Threshold Cryptography Call. We will describe the system and security models, the main construction approaches, implementation status, and preliminary performance results, as well as our plans for the final submissions.
Joint work: Man Ho Au, Robert H. Deng, Liming Gao, Bowen Jiang, Xianhui Lu, Tian Qiu, Guofeng Tang, Ruida Wang, Haiyang Xue, Guomin Yang, Chengru Zhang.
Suggested readings
- Preview Writeup (PDF): TalonG and P-DualTS: Lattice-based Threshold Signatures
- TalonG: Bandwidth-Efficient Two-Round Threshold Signatures from Lattices (ia.cr/2026/303)
