multi-party-schnorr 1.1.0

Multi party schnorr protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103

// Copyright (c) Silence Laboratories Pte. Ltd. All Rights Reserved.
// This software is licensed under the Silence Laboratories License Agreement.

#[cfg(any(feature = "taproot", feature = "eddsa"))]
use elliptic_curve::Group;

#[cfg(any(feature = "taproot", feature = "eddsa"))]
use rand::{CryptoRng, Rng, RngCore};

use thiserror::Error;

#[cfg(any(feature = "taproot", feature = "eddsa"))]
use crate::common::utils::SessionId;

#[cfg(any(feature = "taproot", feature = "eddsa"))]
#[cfg_attr(feature = "serde", derive(serde::Serialize, serde::Deserialize))]
/// All random params needed for sign protocol
pub struct SignEntropy<G: Group> {
    pub(crate) session_id: SessionId,
    pub(crate) k_i: G::Scalar,
    pub(crate) blind_factor: [u8; 32],
    pub(crate) seed: [u8; 32],
}

#[cfg(any(feature = "taproot", feature = "eddsa"))]
impl<G: Group> SignEntropy<G> {
    /// Generate all the random values used in the sign protocol
    pub fn generate<R: CryptoRng + RngCore>(rng: &mut R) -> Self {
        Self {
            session_id: rng.gen(),
            blind_factor: rng.gen(),
            seed: rng.gen(),
            k_i: <G::Scalar as ff::Field>::random(rng),
        }
    }
}

/// Distributed key generation errors
#[derive(Error, Debug)]
pub enum SignError {
    #[error("Invalid party ids on messages list")]
    /// Invalid party ids on messages list
    InvalidParticipantSet,
    /// Party key not found
    #[error("Party key not found")]
    PartyKeyNotFound,
    #[error("Invalid input message count")]
    /// Invalid input message count
    InvalidMsgCount,
    #[error("Invalid party id, message from party not in id list")]
    /// Invalid party id
    UnexpectedPartyId,
    /// Received duplicate party id
    #[error("Received duplicate party id")]
    DuplicatePartyId,
    /// Received duplicate session id
    #[error("Received duplicate session id")]
    DuplicateSessionId,
    /// Invalid party ids
    #[error("Invalid party ids")]
    InvalidMsgPartyId,
    #[error("Wrong receipient, received message for party {0}, expected {1}")]
    /// Wrong receipient
    WrongReceipient(usize, usize),
    /// Already processed message from party
    #[error("Already processed message from party {0}")]
    AlreadyProcessed(usize),

    #[error("Invalid message")]
    /// Invalid message
    InvalidPlaintext,

    /// Decryption error
    #[error("Decryption error: {0}")]
    DecryptionError(String),

    /// Invalid commitment
    #[error("Invalid commitment from party {0}")]
    InvalidCommitment(u8),

    /// Invalid digest
    #[error("Invalid digest")]
    InvalidDigest,

    #[error("Invalid Big R_i, cannot be identity")]
    /// Invalid Big R_i, cannot be identity
    InvalidBigRi,

    /// Invalid DLog proof
    #[error("Invalid DLog proof from party {0}")]
    InvalidDLogProof(u8),

    /// Math error
    #[error("Math error: {0}")]
    MathError(String),

    #[error("Invalid signature")]
    InvalidSignature,
    #[error("Invalid threshold")]
    InvalidThreshold,
    #[error("Invalid derivation")]
    InvalidKeyDerivation,
}