ceremonyclient/nekryptology/pkg/tecdsa/dkls/v1/dealer/dealer.go

83 lines
3.3 KiB
Go
Raw Normal View History

2023-07-05 05:32:28 +00:00
//
// Copyright Coinbase, Inc. All Rights Reserved.
//
// SPDX-License-Identifier: Apache-2.0
//
// Package dealer implements key generation via a trusted dealer for the protocol [DKLs18](https://eprint.iacr.org/2018/499.pdf).
// The trusted dealer produces the same output as the corresponding DKG protocol and can be used for signing without
// additional modifications.
// Note that running actual DKG is ALWAYS recommended over a trusted dealer.
package dealer
import (
"crypto/rand"
"github.com/pkg/errors"
"source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/core/curves"
"source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/ot/base/simplest"
"source.quilibrium.com/quilibrium/monorepo/nekryptology/pkg/tecdsa/dkls/v1/dkg"
)
// GenerationAndDeal produces private key material for alice and bob which they can later use in signing.
// Running actual DKG is ALWAYS recommended over using this function, as this function breaks the security guarantees of DKG.
// only use this function if you have a very good reason to.
func GenerateAndDeal(kappa int, curve *curves.Curve) (*dkg.AliceOutput, *dkg.BobOutput, error) {
aliceSecretShare, bobSecretShare, publicKey := produceKeyShares(curve)
aliceOTOutput, bobOTOutput, err := produceOTResults(kappa, curve)
if err != nil {
return nil, nil, errors.Wrap(err, "couldn't produce OT results")
}
alice := &dkg.AliceOutput{
PublicKey: publicKey,
SecretKeyShare: aliceSecretShare,
SeedOtResult: aliceOTOutput,
}
bob := &dkg.BobOutput{
PublicKey: publicKey,
SecretKeyShare: bobSecretShare,
SeedOtResult: bobOTOutput,
}
return alice, bob, nil
}
func produceKeyShares(curve *curves.Curve) (aliceSecretShare curves.Scalar, bobSecretShare curves.Scalar, publicKey curves.Point) {
aliceSecretShare = curve.Scalar.Random(rand.Reader)
bobSecretShare = curve.Scalar.Random(rand.Reader)
publicKey = curve.ScalarBaseMult(aliceSecretShare.Mul(bobSecretShare))
return aliceSecretShare, bobSecretShare, publicKey
}
func produceOTResults(kappa int, curve *curves.Curve) (*simplest.ReceiverOutput, *simplest.SenderOutput, error) {
oneTimePadEncryptionKeys := make([]simplest.OneTimePadEncryptionKeys, kappa)
oneTimePadDecryptionKey := make([]simplest.OneTimePadDecryptionKey, kappa)
// we'll need a receiver because in its constructor random bits will be selected.
receiver, err := simplest.NewReceiver(curve, kappa, [simplest.DigestSize]byte{})
if err != nil {
return nil, nil, errors.Wrap(err, "couldn't initialize a receiver")
}
packedRandomChoiceBits, randomChoiceBits := receiver.Output.PackedRandomChoiceBits, receiver.Output.RandomChoiceBits
for i := 0; i < kappa; i++ {
if _, err := rand.Read(oneTimePadEncryptionKeys[i][0][:]); err != nil {
return nil, nil, errors.WithStack(err)
}
if _, err := rand.Read(oneTimePadEncryptionKeys[i][1][:]); err != nil {
return nil, nil, errors.WithStack(err)
}
oneTimePadDecryptionKey[i] = oneTimePadEncryptionKeys[i][randomChoiceBits[i]]
}
senderOutput := &simplest.SenderOutput{
OneTimePadEncryptionKeys: oneTimePadEncryptionKeys,
}
receiverOutput := &simplest.ReceiverOutput{
PackedRandomChoiceBits: packedRandomChoiceBits,
RandomChoiceBits: randomChoiceBits,
OneTimePadDecryptionKey: oneTimePadDecryptionKey,
}
return receiverOutput, senderOutput, nil
}