Commit Graph

  • 5f617c7049 upgrade deps feature/taproot_eddsa_S256_ii creamwhip 2022-02-13 23:00:31 +08:00
  • 6fc01c07f2 .github/workflows: use go 1.17 creamwhip 2022-02-05 05:33:51 +08:00
  • ce97eecec7 Makefile: unit test coverage creamwhip 2022-02-05 05:07:52 +08:00
  • 0397aac048 upgrade btcsuite/btcd and btcsuite/btcd/btcec/v2 creamwhip 2022-02-05 02:37:28 +08:00
  • f17c6c232b go mod tidy in cmd tools module master v1.6.0 creamwhip 2022-01-29 21:53:14 +08:00
  • 03f7a4577c move tools (benchgen, benchsign) to their own module creamwhip 2022-01-29 21:51:14 +08:00
  • f08069bfef upgrade dependencies creamwhip 2022-01-29 22:59:51 +08:00
  • 0f000a76aa go mod tidy in cmd tools module creamwhip 2022-01-29 21:53:14 +08:00
  • 1e9891f477 move tools (benchgen, benchsign) to their own module creamwhip 2022-01-29 21:51:14 +08:00
  • 004ee6fe84 eddsa: use schnorrVerify with an error return value creamwhip 2022-01-29 21:41:04 +08:00
  • c8e9a99f55 eddsa: minor clean ups creamwhip 2022-01-29 20:51:03 +08:00
  • 384dc5b44e remove dep github.com/decred/dcrd/dcrec/secp256k1/v2 creamwhip 2022-01-29 20:43:09 +08:00
  • f1aec7611b .github/workflows: run tests with race detection creamwhip 2022-01-29 20:29:39 +08:00
  • a916c493d1 use schnorr verify from Roasbeef's btcd fork creamwhip 2022-01-29 20:29:07 +08:00
  • 29b2a87fd7 experiment with shared schnorr verify experiment/shared-schnorr-verify creamwhip 2022-01-29 20:14:42 +08:00
  • 68d2ee89ce Makefile: remove sleeps creamwhip 2022-01-29 19:09:24 +08:00
  • 36878c11d5 try to replace ed25519 lib with a newer one experiment/replace-ed25519-lib creamwhip 2022-01-29 19:09:00 +08:00
  • 8488daf9f1 upgrade to latest github.com/Roasbeef/btcd BIP340 branch, upgrade deps creamwhip 2022-01-29 15:35:34 +08:00
  • 3a7d0bf6f9 fix .gitignore for test fixtures creamwhip 2022-01-29 13:49:01 +08:00
  • 32a4ad2d76 Exposing lock and unlock functions in party. Avoiding race condition in eddsa keygen unit test. Gustavo Frederico 2022-01-28 16:20:38 -05:00
  • 7fbb47aa0c gitignore test fixtures dirs creamwhip 2022-01-28 15:01:13 +08:00
  • 4155de9e27 delete test fixtures from repo creamwhip 2022-01-28 15:00:48 +08:00
  • 2862aa25d3 Minor fixes to unit tests. No functional change to protocols. Gustavo Frederico 2022-01-27 16:36:48 -05:00
  • 2be88a65d2 Removing unused import in test util file. Gustavo Frederico 2022-01-27 14:05:57 -05:00
  • 97fda5fdb9 Hard-coded constants instead of fixture files for certain unit tests. No functional change to protocol. Gustavo Frederico 2022-01-27 13:59:56 -05:00
  • 0a3f5fdece MTA unit tests: hard-coded constants instead of fixture files. Gustavo Frederico 2022-01-27 11:57:11 -05:00
  • 21ad11806d Various changes matching an external repo. Adding elliptic curve as parameter to functions. Updating the protobuf import package. Gustavo Frederico 2022-01-26 16:15:36 -05:00
  • 64ca29cf09 No functional change (force push) Gustavo Frederico 2022-01-26 07:27:11 -05:00
  • ba2ecfaba6 Minor change: ECDSA signing task name. No functional change. Gustavo Frederico 2022-01-19 20:11:26 -05:00
  • a1c6f726a8 Fixing import not used. Gustavo Frederico 2022-01-16 11:55:30 -05:00
  • 581c172aae Refactoring of Schnorr verification. No functional change. Gustavo Frederico 2022-01-16 11:49:36 -05:00
  • 4c394d22dc Util functions for Schnorr signatures. Gustavo Frederico 2021-12-30 08:57:46 -05:00
  • 8c87d477c6 Resharing, EdDSA, Edwards: simplifying the references to the hashing algorithm. Gustavo Frederico 2021-12-27 15:37:47 -05:00
  • 872d9bc4b3 Signing, EdDSA, Edwards: simplifying the references to the hashing algorithm. Gustavo Frederico 2021-12-27 15:28:55 -05:00
  • da94e85443 Adding ecdsa fixtures back. Gustavo Frederico 2021-12-27 08:43:53 -05:00
  • e42ec2887f Curve name in fixture file suffix for resharing. Exposing EdDSA hashing algorithm externally. Gustavo Frederico 2021-12-26 21:30:15 -05:00
  • f1ad1615fb EdDSA with Schnorr (BIP340), supporting Taproot. In round 3, if R has an odd Y coordinate, add aG to it so as to ensure R with even Y coordinate. Even though BIP 340 states that only R.X is used, the R recalculation in btcd/btcec/v2 's Signature.schnorrVerify checks if R = s*G - e*P. Without adding aG to R, it could have an odd Y coordinate and fail verification. This commit also fixed a previous serialization problem with s. Gustavo Frederico 2021-12-24 15:06:26 -05:00
  • ce6bc7494a Minor change: ECDSA: changing a warn to a panic statement. This change could have been made along c58e4b5ad1 . hotfix/warn-to-panic-minor-change-temporary Gustavo Frederico 2021-12-21 13:27:34 -05:00
  • 6db6d1e4c7 EdDSA with the secp256k1 elliptic curve for Schnorr signatures and Taproot. Work in Progress. Gustavo Frederico 2021-12-21 13:19:44 -05:00
  • 668d0061fa Merge pull request #16 from SwingbyProtocol/feature/cggmp21oct-tss-lib creamwhip 2021-12-19 22:09:10 +00:00
  • 1e02560e7e Merging the branch that has CGGMP21 Oct changes onto the master branch. Resolving conflicts (listed below). In general, file versions of CGGMP21 Oct were chosen and security patches or small recent improvements from the master branch were copied over. Gustavo Frederico 2021-12-17 16:03:49 -05:00
  • 1bfe24ba54 update all dependencies creamwhip 2021-12-14 08:20:03 +00:00
  • 5e1a425dd1 regenerate EdDSA test fixtures creamwhip 2021-12-14 08:19:48 +00:00
  • c58e4b5ad1 Additional check when Ks mismatch in savedata and sortedID Gustavo Frederico 2021-12-13 11:41:25 -05:00
  • b401af0289 Do not normalize IDs of Shamir's Secret Sharing Gustavo Frederico 2021-12-13 11:31:03 -05:00
  • bd32a619a8 Signing - prepare: check of user id equality modulo curve order. Gustavo Frederico 2021-12-07 10:51:15 -05:00
  • 3a9d45177e Fixing issue in the Feldman VSS code. Checking indexes modulo the curve order, so as not to leak evaluation at point 0. Gustavo Frederico 2021-12-07 10:44:07 -05:00
  • 4cd8e37b89 Signing - prepare: check of user id equality modulo curve order. Gustavo Frederico 2021-12-07 10:51:15 -05:00
  • b6e761a803 go fmt creamwhip 2021-12-07 22:36:11 +08:00
  • 17772d0e9c Changing the validation of the mod zkp. Changing back validation of NonEmptyBytes. Adding back the TestBadMessageCulprits unit test. Gustavo Frederico 2021-12-01 11:22:53 -05:00
  • 8b376e72fc go fmt only for files touched in comparison with forked branch (cggmp21-tss-lib). No functional change in this commit. Gustavo Frederico 2021-11-30 21:37:24 -05:00
  • eea5a431bb Changing the abort identification unit test to depict fairly the behaviour of the innocent party. This commit removes lines from the unit test that changed the internal storage of round 1 and round 3 data (for the victim party). The culprit is identified in round 4 in this commit. The current change is only to the unit test. That is, there is no functional change to the protocol. Gustavo Frederico 2021-11-29 14:52:12 -05:00
  • 928b825cbe Fixing casting error in TestAbortIdentification. Gustavo Frederico 2021-11-29 06:53:08 -05:00
  • f55f232984 eddsa: fix EdDSA resharing test creamwhip 2021-11-29 18:16:02 +08:00
  • 225f725810 test: re-gen fixtures for 5 participants in tests creamwhip 2021-11-29 18:15:48 +08:00
  • 2ee867dfd9 common/random_test: ensure odd relative prime int in TestGetRandomQuadraticNonResidue creamwhip 2021-11-29 18:01:20 +08:00
  • ce74f650c0 Makefile: set test timeouts to 30 mins creamwhip 2021-11-29 18:00:59 +08:00
  • 5fa29d51f1 Reverting change to BaseUpdate. Gustavo Frederico 2021-11-25 18:40:26 -05:00
  • 8dd9614fdc Change to Update in sign_4 (round 4) of signing, so as to avoid a deadlock. Change to tss.BaseUpdate removing recursion. Gustavo Frederico 2021-11-24 23:07:09 -05:00
  • 3f7a324701 Testing with fewer parties. Gustavo Frederico 2021-11-23 06:43:14 -05:00
  • 697e6ece3c fix calls to BaseUpdate creamwhip 2021-11-23 19:38:14 +08:00
  • 974d8cfd1a Removing extra logging. No funcional change. Gustavo Frederico 2021-11-22 19:17:13 -05:00
  • f81d9700a2 Adding identification of abort for ECDSA signing. Gustavo Frederico 2021-11-22 19:08:19 -05:00
  • 36573fc6ee Initial updates of the October version of the CGGMP21 paper. Work in progress. Gustavo Frederico 2021-11-15 21:38:27 -05:00
  • 2042383b62 Adding the No Small Factor Proof, mentioned in the CGGMP21-October paper. Gustavo Frederico 2021-11-15 16:52:59 -05:00
  • 701d83177a Paillier check. Mta and Dec unit tests. cggmp21-tss-lib Gustavo Frederico 2021-11-08 23:56:44 -05:00
  • 258557a65e Adding a unit test function in zkpdec including composition of Paillier addition and multiplication. The same logic will apply to identification_6.go. No functional change. Gustavo Frederico 2021-11-04 19:58:24 -04:00
  • 52732f1fe5 remove a random println creamwhip 2021-10-29 17:24:20 +08:00
  • b396352ce9 Bug fix for vss, check shareid when constructing vss. Gustavo Frederico 2021-10-27 19:26:33 -04:00
  • ac1d2cc9a0 Identification of aborts with unit test. Gustavo Frederico 2021-10-26 23:39:42 -04:00
  • b961e02c70 Renaming variables to match the paper. No functional change in this commit. Gustavo Frederico 2021-10-26 12:12:10 -04:00
  • 5c51a3aca7 Minor change: adding error handling in round 1 (keygen). Gustavo Frederico 2021-10-18 18:39:44 -04:00
  • 4397af0043 keygen: adding a Schnorr proof in round 1. Adding missing ridi and rid. Adding Xi and Ai to the hashes and messages. Adding Schnorr zkp in round 3. Adding proof verifications in round 4. Gustavo Frederico 2021-10-18 18:39:19 -04:00
  • 2abb1033ec ecdsa: some cleanup, assign culprits creamwhip 2021-10-18 15:01:22 +08:00
  • ed06542187 ecdsa/keygen: ensure paillier modulus == paillierModulusLen creamwhip 2021-10-18 14:51:56 +08:00
  • d70c605c98 ecdsa/keygen: ensure paillier modulus == paillierModulusLen creamwhip 2021-10-18 14:29:31 +08:00
  • cf960baa49 Check the Paillier modulus bit length in round 2 of keygen, ensuring it is not too small. That would be a security threat. Gustavo Frederico 2021-10-14 17:51:24 -04:00
  • df096b7875 Using make to reset certain variables after use, instead of setting to nil, considering that update may still be called. Adding a return function to the BaseUpdate, matching the master commit as of today. Without the function and the recursive call, the resharing unit test does not proceed after round 3. Gustavo Frederico 2021-10-05 19:40:31 -04:00
  • 2b4c86e19e remove gh action temporarily creamwhip 2021-09-30 17:03:49 +08:00
  • 45f504e4a9 regen protobufs for protoc-gen-go v1.27.1 creamwhip 2021-09-30 17:02:03 +08:00
  • 33cf57dddc refactor redundant safe prime in pre params data creamwhip 2021-09-30 16:54:13 +08:00
  • bf16e4fc74 go mod tidy creamwhip 2021-09-30 16:53:49 +08:00
  • ac37ece47f ecdsa-keygen parallization and code clean ycen 2021-09-30 18:00:10 +08:00
  • 06fd3376c8 Fix ecdsa/keygen E2E test not run ycen 2021-09-27 15:04:43 +08:00
  • a01df8351c Fix ecdsa-keygen test ycen 2021-09-23 20:47:45 +08:00
  • 356a99831b Fix broken eddsa caused by change of zkp/sch ycen 2021-09-23 14:17:39 +08:00
  • 1ff2f61744 Update ecdsa-keygen protol ycen 2021-09-23 13:49:11 +08:00
  • c6b18b0af9 Add ZK proof prm and sch with related change in ecdsa/keygen ycen 2021-09-16 14:33:56 +08:00
  • aa596c3c2f Add ZKP needed form identification ycen 2021-09-13 18:21:51 +08:00
  • bca3d16910 Parse received message and store parsed variable ycen 2021-09-10 12:58:17 +08:00
  • 37236798d1 Modified names in message ycen 2021-09-09 20:15:20 +08:00
  • 07d80fc111 Rename round name to presign/sign ycen 2021-09-09 20:09:39 +08:00
  • 18a04094ef Parallized processing proof generation and verify ycen 2021-09-09 16:06:54 +08:00
  • 7f81429cfe Merge commit '3e4ded5feaf5a14f80a87e53bf27646851c8dd57' into internal-mobile-wrapper Patrick Cen 2021-09-09 11:41:01 +08:00
  • 97d9fe472b CGGMP protocol update. Patrick Cen 2021-09-09 00:53:33 +08:00
  • 3e4ded5fea fix: add nist256p1 as default registered curve (#143) cong 2021-09-08 13:52:21 +08:00
  • 1bb8d12a9e Merge pull request #142 from binance-chain/hd_curve_parameter ycen 2021-09-08 13:40:16 +08:00
  • ebed832779 pass curve in DeriveChildKey FitzLu 2021-09-08 13:35:37 +08:00
  • 3188c30104 specify curve in NewExtendedKey FitzLu 2021-09-08 13:00:50 +08:00
  • bc2891e50e Merge branch 'internal-mobile-wrapper' of https://github.com/binance-chain/tss-lib into internal-mobile-wrapper Patrick Cen 2021-09-01 11:39:04 +08:00