ECDSA digital signature method based on two-party collaboration

Abstract

The invention discloses an ECDSA digital signature method based on two-party collaboration. The method comprises the following steps: step 1), respectively generating corresponding signature public and private key pairs and other parameters by a signature party Alice and a signature party Bob participating in the collaborative signature; and step 2), collaboratively completing ECDSA signature by Alice and Bob, and finally outputting the signature (r,s). According to the ECDSA digital signature method based on the two-party collaboration provided by the invention, under the premise of ensuringthe security and the correctness, a signature process does not introduce high-overhead password operations such as homomorphic encryption, oblivious transfer and the like, so that a signature scheme achieves a good balance between the communication overhead and the computation overhead, and therefore the performance is remarkably superior to that of all existing ECDSA two-party collaborative digital signature methods.

Description

technical field [0001] The invention relates to information security technology, in particular to an ECDSA digital signature method based on cooperation between two parties. Background technique [0002] Digital signature is the simulation of traditional handwritten signature in digital environment, which can guarantee the unforgeability, authenticity and integrity of digital information. Usually, one party generates a digital signature, which can be publicly verified by other parties. With the development of the Internet, digital signature technology has been widely used in many fields such as finance, business, military and diplomacy. In order to reduce the risk of centralization of signature rights or loss of signature keys, some special documents (such as highly confidential documents) usually require the cooperation of multiple people to complete the signature. [0003] Aiming at this kind of problem, the common solution is to adopt the threshold secret sharing scheme....

AI Technical Summary

Problems solved by technology

[0003] Aiming at this kind of problem, the common solution is to adopt the threshold secret sharing scheme. However, the threshold scheme involves the key recovery process in the implementation process, and requires a trusted participant or third party to hold the complete and correct key generated by the process. private key, so that the participant or third party who holds the complete private key can complete the signature without the knowledge of other participants, which largely breaks the security and fairness of the system

In order to solve this problem, some scholars have proposed a two-party ECDSA signature with two-party collaboration and no need to recover the key. However, the existing two-party collaborative signature scheme must introduce computational overhead in order to ensure the privacy of the private key and the correctness of the signature. Very high homomorphic encryption algorithms (such as Paillier encryption) or oblivious transfer protocols with very high communication overhead, etc., which make the deployment of the algorithm in practical applications (especially devices with limited communication overhead and computing overhead) face great challenges

Images