2

I read about ways to create a t-of-n threshold signature, corresponding to a collective public key of n players. (https://datatracker.ietf.org/doc/html/draft-ford-cfrg-cosi-00 and Does Ed25519 support cryptographic threshold signatures?).

Is it possible to verify a t-of-n signature, by knowing only the collective public key of all n players, and not the personal public keys of the signing (t) players? I.e. the signature can be treated (verified) like a "normal" Ed25519 signature?

Fernseher
  • 21
  • 2

0 Answers0