October 7, 2026
Guofeng Tang - Singapore Management University @ Singapore
"Preview Talk" (by team Octopus) @ TCPT3, in reply to the NIST Threshold Call
Abstract: In this presentation, we will introduce a two-round threshold BBS scheme, which currently achieves the minimum number of rounds. It is the best of both worlds: it satisfies security under a dishonest majority assumption and robustness under an honest majority, meaning that the signing protocol is guaranteed to output a valid signature as long as there are enough honest signers. Additionally, we will discuss how this protocol achieves high efficiency while minimizing communication rounds and maintaining robustness. At the same time, we will also introduce a two-party BBS scheme in two passes, which outperforms previous two-party constructions in terms of both communication and computation. This makes our solutions highly practical for decentralized credential systems and real-world privacy-preserving applications.
Joint work: Man Ho Au, Robert H. Deng, Liming Gao, Bowen Jiang, Xianhui Lu, Tian Qiu, Guofeng Tang, Ruida Wang, Haiyang Xue, Guomin Yang, Chengru Zhang.
Suggested readings
Presented at NIST TCPT3: Threshold Call Preview Talks #3 (3rd day; 2026-Oct-07)
