mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
A July commit removed eight papers on the premise "no license — DEX/non-custodial only". That premise is wrong: Lux operates an ATS, a broker-dealer, a transfer agent and a bank, and this material is resold at lux.financial. The merge that brought main in preserved the removal because the commit stated a reason, which is how a stale reason outlives the fact it rested on. Back, at the versions main carried — main never received the removal, so its copies are the later ones: the ATS architecture, the security-token standard, smart order routing, institutional custody, MPC custody, post-quantum securities, the SSB partnership and the CoinBridge brief. 83 files. Co-authored-by: Hanzo Dev <[email protected]>
40 lines
1.8 KiB
TeX
40 lines
1.8 KiB
TeX
\section{Introduction}
|
|
|
|
\label{sec:intro}
|
|
%% =====================================================================
|
|
|
|
Traditional securities custody relies on a custodian bank that holds
|
|
assets on behalf of clients. The custodian is a single point of
|
|
failure: if it is compromised, all client assets are at risk. If it
|
|
becomes insolvent, clients are general creditors. Blockchain-based
|
|
securities remove the custodian by making the private key the proof
|
|
of ownership, but this shifts the risk to key management: a lost key
|
|
means lost assets, and a stolen key means stolen assets.
|
|
|
|
Threshold signing eliminates the single-key problem. Instead of a
|
|
single private key, the signing capability is distributed across
|
|
multiple parties via secret sharing. A $t$-of-$n$ threshold scheme
|
|
requires $t$ parties to cooperate to produce a valid signature, while
|
|
any $t-1$ parties learn nothing about the key. The on-chain address
|
|
is derived from the \emph{aggregate} public key and is
|
|
indistinguishable from a standard single-key address.
|
|
|
|
This paper describes the custody architecture deployed on the Liquid
|
|
EVM for digital securities. The architecture uses two threshold
|
|
signing protocols:
|
|
|
|
\begin{itemize}[nosep]
|
|
\item \textbf{CGGMP21}~\cite{cggmp21}: Threshold ECDSA for
|
|
secp256k1. Produces standard $(r, s, v)$ Ethereum signatures.
|
|
Used on EVM chains (downstream EVM L1s, Ethereum, Polygon, BSC).
|
|
\item \textbf{FROST}~\cite{frost}: Threshold Schnorr for Ed25519
|
|
and BIP-340 Taproot. Produces standard 64-byte Schnorr
|
|
signatures. Used on Solana, TON, Cosmos, and Bitcoin Taproot.
|
|
\end{itemize}
|
|
|
|
Both protocols operate over the same Shamir secret sharing
|
|
infrastructure (the \texttt{luxfi/threshold} LSS library) and share
|
|
a common key generation ceremony.
|
|
|
|
%% =====================================================================
|