gnosis / dkg

Distributed key generation

dkg

Distributed key generation

This repository is a work in progress. It contains an implementation of ECDKG by Tang using the group interface from dedis/kyber. This integration allows different elliptic curves such as Secp256k1 (with tests) and bn256 (on master) to be used in the dkg scheme.

Installation

go get https://github.com/gnosis/dkg

Take a look at the test for intended use.

*Please Note: The messaging/network layer of the scheme has not been implemented.

dkg's Issues

Support io.writer instead of cipher.Stream

Implement universal curve interface

Currently, there are separate branches for each curve. There are many curves out there, so we should re-design to accommodate them without multiple branches.

Add toy group

For tests, oftentimes a real cryptographic group can be hard to use for verifying crypto protocols to be correctly working. For this reason, a toy group (maybe a toy pairing group?) may be desirable.

Any example for same, how to use ?

Research Broadcast Messaging Options

Some existing options:

• ZeroMQ
• IPFS
• libp2p (underlies IPFS)
• devp2p (underlies Ethereum)

Some requirements:

• Nodes have to be able to get all info they need even if they join late or their connection is spotty or something.

Support encryption shadows

Write the rest of the message structs

Use side-channel safe secp256k1 implementation

Golang has a reference generic elliptic curve group implementation, but it's not side-channel safe.

There is one out there. Figure out how to use it.

Write marshallers to match wire format of Parity, Dfinity, etc.

We're using the gob encoding package right now (it exposes a go-specific BinaryMarshaller).

We will want a marshaller(s?) for the following:

• Parity Secret Store.
• Dfinity has their own DKG.

Private messaging security

How to make sure messages are authenticated and encrypted on the tech we end up choosing for messaging.

Support secp256k1 curve

Implement kyber.Group Interface and methods for secp256k1 elliptic.Group

Finish Lagrange Interpolate Zero

Example Test:

1. create a random polynomial with threshold t
2. sample t points from it (x1, fX1) ... (xt, fXt) (this is using the evaluate function)
3. pass those points into LagrangeInterpolateZero(..) and verify that the result of that == random polynomial evaluated at 0