TSSKit: Threshold Signature Scheme Toolkit

Description

TSSKit automatically selects the appropriate Threshold Signature Scheme based on a set of options required by the secret sharing needs of each application. This comprehensive list of options includes private key splitting, multisig detection, HD derivation, signer privacy, and signature size, etc.

TSSKit also generates a set of ready-to-use codebase/scripts that are optimized based on a set of specified parameters.

Welcome to create any number of pull requests to contribute more codebases that we've missed. BUIDL!

Active curators: yhuag and tina1998612

Active reviewers: ChenPoWei

Types fo Schemes

Shamir's Secret Sharing (SSS)
Threshold ECDSA
Threshold Ed25519
Schnorr Signatures
BLS Signatures

Options

Option	Choice
Private Key Splitting	True / False
Multi-signature Detection	True / False
HD Derivation	True / False
Weight	True / False
Signer Privacy	True / False
Signature Size	Linear Growth / Constant
Key Generation Time	Linear Growth / Constant
Key Generation Round	Value
Key Generation Role	Single Party / DKG Scheme
Verification Time	Strict / Relax
Signing Time	Strict / Relax
Signing Round	Value
Curve	Curve Choice

Free to create pull request to add more

Conceptual Comparisons across Schemes

	t-ECDSA	t-Schnorr	Ed25519	BLS
Variants
Has non-threshold variant	✔︎	✔︎	✔︎	✘
Curve
Curve Family	Elliptic	Elliptic	Twisted Edwards	Pairing-friendly
Signature
Size (bytes)	71 - 75	64	64	33
Aggregation	X	Entire multi-sig	Entire multi-sig (variant)	Entire block
Format	Pair	Pair	Pair	Single Curve Point
Multisignature Differentiable	✔︎	✘	✘	N/A
Signing
Time Complexity	High	Medium	Low	Low
Interaction Rounds	Multiple	Two	Three	✘
Verifying
Verification Targets	Separately	Aggregated	Batch / Single	Aggregated
Time Complexity	Medium	Low	Low	High
Block
Block Capacity Usage	Large	Medium	Medium	Small
Block Content	Signature + Public Key + Data	Several Combined Signatures + Public Key + Data	Several Combined Signatures + Public Key + Data	One Aggregated Signature + Public Key + Data
Randomness
Random Number Generator (k)	Deterministic	Strictly Dependent	Deterministic	Not Required
New Randomness Consumption	Key Generation, Signing	Key Generation, Signing	Key Generation	Not Required
Setup
Key Generation	DKG	DKG	DKG	Membership
Key Storage	N/A	Merkle Tree (Verifying)	N/A	Pre-generate all the keys (Signing)
Space Complexity	Low	High	Low	Positively correlated with the number of signing cycles
Time Complexity	High	Medium	Low	High
Time Bottleneck	The curve used for generating key public / private pairs	1. The curve used for generating key public / private pairs 1. n and m for merkle tree	Random Number Generator	Takes time to generate membership keys
Security
Hash Collision Resilience	Low	High	High	N/A
Side-channel Attack Resilience	Low	High (variant)	High	High
Other Possible Attacks	Secp112r1 Leakage Attacks, Weak RNG Attacks	Rogue Key Attacks	Single Fault Attacks	MOV Attacks, Rogue Key Attacks
Hashing
Hash Output	Number	Number	Number	Curve Point
Privacy
Public Key	Revealed	Hidden	N/A	N/A

Multi Signature vs Threshold Signature

	Multi-sig	Threshold-sig
Relationship between (number of signers) and (signature length, generation time, verification time)	Scales linearly	Independent
Reveal the identities of signers	Yes	No
Signature verification	Use all public keys	Use a unique fixed public key
Can do m-out-of-n signing	Yes	Yes
Signature is composed of	Concatenation of ( description of the subgroup + regular signatures computed by each member’s secret key )	Regular signatures computed by all members' aggregated private key