Rust implementation of multiparty Ed25519 signature scheme.

• Aggregated Signatures
• Accountable-Subgroup Multisignatures.
• Threshold EdDSA scheme based on provably secure distributed schnorr signatures and a {t,n} threshold scheme. For more efficient implementation we used the DKG from Fast Multiparty Threshold ECDSA with Fast Trustless Setup. The cost is robustness: if there is a malicious party out of the n parties in DKG the protocol stops and if there is a malicious party out of the t parties used for signing the signature protocol will stop.

The above protocols are for Schnorr signature system. EdDSA is a variant of Schnorr signature system with (possibly twisted) Edwards curves. We adopt the multi party implementations to follow Ed25519 methods for private key and public key generation according to RFC8032

This library is released under the terms of the GPL-3.0 license. See LICENSE for more information.

The contribution workflow is described in CONTRIBUTING.md.

Feel free to reach out or join the ZenGo X Telegram for discussions on code and research.