Non-interactive SM2 threshold signature scheme with identifiable abort  

作　　者：Huiqiang LIANG Jianhua CHEN 

机构地区：[1]School of Mathematics and Statistics,Wuhan University,Wuhan 430072,China

出　　处：《Frontiers of Computer Science》2024年第1期171-185,共15页中国计算机科学前沿（英文版）

摘　　要：A threshold signature is a special digital signature in which the N-signer share the private key x and can construct a valid signature for any subset of the included t-signer,but less than t-signer cannot obtain any information.Considering the breakthrough achievements of threshold ECDSA signature and threshold Schnorr signature,the existing threshold SM2 signature is still limited to two parties or based on the honest majority setting,there is no more effective solution for the multiparty case.To make the SM2 signature have more flexible application scenarios,promote the application of the SM2 signature scheme in the blockchain system and secure cryptocurrency wallets.This paper designs a non-interactive threshold SM2signature schemebasedon partially homomorphic encryption and zero-knowledge proof.Only the last round requires the message input,so make our scheme non-interactive,and the pre-signing process takes 2 rounds of communication to complete after the key generation.We allow arbitrary threshold t<n and design a key update strategy.It can achieve security with identifiable abort under the malicious majority,which means that if the signature process fails,we can find the failed party.Performance analysis shows that the computation and communication costs of the pre-signing process grows linearly with the parties,and it is only 1/3 of the Canetti's threshold ECDSA(CCS'20).

关 键 词：SM2 signature secure multi-party computation threshold signature UC-secure dishonest majority 

分 类 号：TN918.4[电子电信—通信与信息系统]