zecfoundation
/
reddsa
mirror of https://github.com/ZcashFoundation/reddsa.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Link to FROST security audit from module doc (#73)

This commit is contained in:
Deirdre Connolly 2021-03-31 17:45:34 -04:00 committed by GitHub
parent 2f3f5068aa
commit 84d0fb60e2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/frost.rs
View File

@ -12,9 +12,10 @@
//! An implementation of FROST (Flexible Round-Optimized Schnorr Threshold) //! An implementation of FROST (Flexible Round-Optimized Schnorr Threshold)
//! signatures. //! signatures.
//! //!
//! > **WARNING**: This implementation is unstable and subject to //! This implementation has been [independently
//! > revision. It is not covered by the crate's semver guarantees and should not //! audited](https://github.com/ZcashFoundation/redjubjub/blob/main/zcash-frost-audit-report-20210323.pdf)
//! > be deployed without consultation from the FROST authors! //! as of commit 76ba4ef / March 2021. If you are interested in deploying
//! FROST, please do not hesitate to consult the FROST authors.
//! //!
//! This implementation currently only supports key generation using a central //! This implementation currently only supports key generation using a central
//! dealer. In the future, we will add support for key generation via a DKG, //! dealer. In the future, we will add support for key generation via a DKG,
@ -485,9 +486,9 @@ fn gen_group_commitment(
for commitment in signing_package.signing_commitments.iter() { for commitment in signing_package.signing_commitments.iter() {
// The following check prevents a party from accidentally revealing their share. // The following check prevents a party from accidentally revealing their share.
// Note that the '&&' operator would be sufficient. // Note that the '&&' operator would be sufficient.
if identity == commitment.binding || identity == commitment.hiding { if identity == commitment.binding || identity == commitment.hiding {
return Err("Commitment equals the identity."); return Err("Commitment equals the identity.");
} }
let rho_i = bindings let rho_i = bindings
.get(&commitment.index) .get(&commitment.index)