[curves] Threshold ECDSA / comparison to Schnorr
lists at fredericjacobs.com
Tue Mar 10 06:18:19 PDT 2015
I do believe there is another parameter to take into account.
The threshold sigs from the Princeton paper wants signer’s anonymity which I believe is not achieved in threshold Schnorr sigs.
> On 09 Mar 2015, at 22:21, Trevor Perrin <trevp at trevp.net> wrote:
> Some advances have been made on practical threshold ECDSA by Steven
> Goldfeder et al:
> Is anyone able to breakdown how this compares to threshold Schnorr?
> In particular: Does Schnorr still hold an advantage in this area, or
> has ECDSA closed the gap? What are the differences with respect to:
> - trust assumptions (trusted setup, robustness to misbehaving parties)
> - communication costs (in particular, # of rounds)
> - computation costs
> - implementation complexity
> Curves mailing list
> Curves at moderncrypto.org
More information about the Curves