tsslib 0.2.0

Easy-to-use threshold signature schemes (FROST, ML-DSA, DKLs23) — wire- and save-data-compatible with the Go tss-lib.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

//! Threshold ML-DSA (FIPS 204) signing.
//!
//! Implements the ML-DSA variant from "Threshold Signatures Reloaded: ML-DSA
//! and Enhanced Raccoon with Identifiable Aborts" (Borin, Celi, del Pino,
//! Espitau, Niot, Prest — ePrint 2025/1166). It produces byte-identical FIPS 204
//! signatures that verify against a stock ML-DSA public key.
//!
//! The target is ML-DSA-44 with any `(threshold t, parties n)` where
//! `2 ≤ t ≤ n ≤ 6`. Key generation uses a trusted dealer (matching the paper's
//! reference); distributed key generation is future work.
//!
//! # Warning
//!
//! This is an academic-grade prototype. It has not received independent
//! cryptanalytic review and is **not** suitable for production use.
//!
//! # Status
//!
//! Trusted-dealer keygen ([`trusted_dealer_keygen44`]) and threshold signing
//! ([`sign44`]) are implemented and produce FIPS-204-verifiable signatures.
//! Built on `purecrypto`'s `mldsa::hazmat` lattice primitives; the hyperball
//! rejection sampler and full-range `w` packing live in this module. Distributed
//! key generation (no trusted dealer) is future work.

// Index-paired loops over polynomial vectors (`for j in 0..L { v[j]... }`) are
// idiomatic here and read closer to the FIPS 204 / reference math than iterator
// adapters would; allow them module-wide.
#![allow(clippy::needless_range_loop)]

mod hyperball;
mod key;
mod keygen;
mod keygen_party;
mod packing;
mod params;
mod signing;
mod signing_party;

pub use key::{Key44, Share44};
pub use keygen::trusted_dealer_keygen44;
pub use keygen_party::DkgParty44;
pub use params::{GetThresholdParams44Error, ThresholdParams44, get_threshold_params44};
pub use purecrypto::mldsa::MlDsa44PublicKey as PublicKey;
pub use signing::{sign44, sign44_checked};
pub use signing_party::SigningParty44;

/// Errors raised by the `mldsatss` protocol.
#[derive(Debug)]
pub enum Error {
    /// A value failed an internal consistency check.
    Validation(String),
}

impl std::fmt::Display for Error {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        match self {
            Error::Validation(m) => write!(f, "mldsatss: {m}"),
        }
    }
}

impl std::error::Error for Error {}

impl From<serde_json::Error> for Error {
    fn from(e: serde_json::Error) -> Self {
        Error::Validation(format!("json: {e}"))
    }
}