Threshold-Optimal DSA/ECDSA Signatures and an Application to Bitcoin Wallet Security

  • Rosario Gennaro
  • Steven Goldfeder
  • Arvind Narayanan
Conference paper

DOI: 10.1007/978-3-319-39555-5_9

Volume 9696 of the book series Lecture Notes in Computer Science (LNCS)
Cite this paper as:
Gennaro R., Goldfeder S., Narayanan A. (2016) Threshold-Optimal DSA/ECDSA Signatures and an Application to Bitcoin Wallet Security. In: Manulis M., Sadeghi AR., Schneider S. (eds) Applied Cryptography and Network Security. ACNS 2016. Lecture Notes in Computer Science, vol 9696. Springer, Cham

Abstract

While threshold signature schemes have been presented before, there has never been an optimal threshold signature algorithm for DSA. The properties of DSA make it quite challenging to build a threshold version. In this paper, we present a threshold DSA scheme that is efficient and optimal. We also present a compelling application to use our scheme: securing Bitcoin wallets. Bitcoin thefts are on the rise, and threshold DSA is necessary to secure Bitcoin wallets. Our scheme is the first general threshold DSA scheme that does not require an honest majority and is useful for securing Bitcoin wallets.

Copyright information

© Springer International Publishing Switzerland 2016

Authors and Affiliations

  • Rosario Gennaro
    • 1
  • Steven Goldfeder
    • 2
  • Arvind Narayanan
    • 2
  1. 1.City CollegeCity University of New YorkNew YorkUSA
  2. 2.Princeton UniversityPrincetonUSA