Files
zeekay abf99d05fc papers: reorganize into per-paper dirs, add Antje Worring as co-author
Restructured from flat .tex/.pdf files into per-paper subdirectories.
Added Antje Worring as co-author on all papers.
Synced PDFs to pdfs/ for download site.
2026-04-18 21:50:07 -07:00

30 lines
1.4 KiB
TeX

\section{Related Work}
\label{sec:related}
% ============================================================
\paragraph{Threshold Schnorr.}
FROST~\cite{komlo2020frost} optimized threshold Schnorr to 2 rounds from the 3-round
GJKR protocol~\cite{gennaro2003}. ROAST~\cite{ruffing2022roast} adds robustness to
FROST by running parallel signing sessions. MuSig2~\cite{nick2021musig2} provides
2-round multi-signatures (all-of-$n$) for Bitcoin Taproot but does not support
threshold ($t < n$) configurations.
\paragraph{Threshold ECDSA.}
GG18~\cite{gennaro2018} introduced practical threshold ECDSA.
GG20~\cite{gennaro2020} improved efficiency but lacked identifiable abort.
CGGMP21~\cite{canetti2021cggmp} achieved UC security with identifiable abort.
Doerner et al.~\cite{doerner2018} optimized the 2-party case.
\paragraph{BLS-based bridges.}
Wormhole~\cite{wormhole2023} uses BLS12-381 guardian signatures. BLS aggregation is
compact but requires custom verifiers on non-BLS chains (180,000+ gas on EVM). EIP-2537
adds BLS precompiles to Ethereum but is not yet widely deployed on L2s.
\paragraph{MPC wallets.}
Fireblocks~\cite{fireblocks2023} and ZenGo~\cite{zengo2019} deploy threshold
signatures for institutional custody. Both use variants of GG20/CGGMP21 for ECDSA but
do not address Ed25519 chains or Bitcoin Taproot.
% ============================================================