Cryptographic Technologies

Not Blockchain-centric

Cryptographic primitives

Multisig

• Schnorr signatures are O(1) space-efficient but take O(n³) messages so only scale to a few participants, though it looks like Zcash's variant of FROST might solve the latter issue. See also BIP-340, Threshold Signatures with Private Accountability (TAPS) and Schnorr Wizardry.
• ECDSA threshhold multisig: Rust implementation of Gennaro Goldfeder (2019 revision); 2020 Survey; 2022 review; Design and analysis of a distributed ECDSA signing service (2022), by Groth & Shoup, used by DFINITY, for (f+1)-out-of-n where f<n/3
• BLS signatures are slightly more expensive to check but only take O(n) messages and so scale to larger number of participants. --- see what Chainlink does about it.
• Threshold-optimal DSA/ECDSA signatures and an application to Bitcoin wallet security
• Q: can we efficiently reshuffle a same multisig key with a thousand members, such that the old committee has no advantage with the new committee?

Homomorphic Encryption

• zk-SNARKs
• STARKs, e.g. from Starkware
• zkps in 2019
• Reusable Non-Interactive Secure Computation
• Jonathan Katz,
• ... something in F* or Coq from MSR Cambridge?

Time-Lock Encryption

• Time-lock encryption

Protocols

Multi-Party Computation

• Efficent Multi-Party computation toolkit
• Obliv-C

Humor

• Alice and Bob