ceremonyclient/nekryptology

Nekryptology

Coinbase's advanced cryptography library, brought back from the dead and enhanced

Differences from Kryptology

• Schnorr proofs are patched to use hash-to-curve, fixes a bug where depending on the curve there may be a small to very large percentage of proofs that are invalid encodings
• Supports BLS48-581 (uses MIRACL-generated implementation, slightly altered to align to curves.Scalar/curves.Point interfaces)
• Enhanced KOS15 implementation to support arbitrary computational and statistical security parameters
• Updated DKLs18 multiplication to use KOS15 enhancements
• OT-based t-of-n multiplication scheme (borrowed from DKLs19)
• Supports <=2048-bit IQC primitives (uses harmony-one's implementation, slightly adjusted to fix vulnerabilities in FS transform)
• Added Wesolowski VDF
• GG20 is removed

Quickstart

Use the latest version of this library:

go get source.quilibrium.com/quilibrium/monorepo/nekryptology

Documentation

Public documentations can be found at https://pkg.go.dev/source.quilibrium.com/quilibrium/monorepo/nekryptology

To access the documentation of the local version, run godoc -http=:6060 and open the following url in your browser.

http://localhost:6060/pkg/source.quilibrium.com/quilibrium/monorepo/nekryptology/

Developer Setup

Prerequisites: golang 1.18, make

git clone git@source.quilibrium.com/quilibrium/monorepo/nekryptology.git && make 

Components

The following is the list of primitives and protocols that are implemented in this repository.

Curves

The curve abstraction code can be found at pkg/core/curves/curve.go

The curves that implement this abstraction are as follows.

• BLS12377
• BLS12381
• BLS48581
• Ed25519
• Secp256k1
• P256
• Pallas

IQC

The IQC abstraction code can be found at pkg/core/iqc/classgroup.go.

Protocols

The generic protocol interface pkg/core/protocol/protocol.go.

• Cryptographic Accumulators
• Bulletproof
• Oblivious Transfer
  • Verifiable Simplest OT
  • KOS OT Extension
• Threshold ECDSA Signature
  • DKLs18 - DKG and Signing
  • GG20: The authors of GG20 have stated that the protocol is obsolete and should not be used. See https://eprint.iacr.org/2020/540.pdf.
    • GG20 - DKG
    • GG20 - Signing
• Threshold Schnorr Signature
  • FROST threshold signature - DKG
  • FROST threshold signature - Signing
• Paillier encryption system
• Secret Sharing Schemes
  • Shamir's secret sharing scheme
  • Pedersen
  • Feldman
• Verifiable encryption
• ZKP Schnorr

Contributing

• Versioning: vMajor.Minor.Patch
  • Major revision indicates breaking API change or significant new features
  • Minor revision indicates no API breaking changes and may include significant new features or documentation
  • Patch indicates no API breaking changes and may include only fixes

References

• [GG20] One Round Threshold ECDSA with Identifiable Abort.
• [specV5] One Round Threshold ECDSA for Coinbase.
• [EL20] Eliding RSA Group Membership Checks. src
• [P99] Public-Key Cryptosystems Based on Composite Degree Residuosity Classes.