KarpelesLab / tss-lib / 24556290321

77%

Build Type

push

github

Committed by MagicalTux

Commit Message

add post-quantum threshold ML-DSA-44 signing (mldsatss)

Implements the ML-DSA variant from "Threshold Signatures Reloaded: ML-DSA
and Enhanced Raccoon with Identifiable Aborts" (Borin, Celi, del Pino,
Espitau, Niot, Prest, ePrint 2025/1166) on top of KarpelesLab/mldsa.
Produces byte-identical FIPS 204 signatures that verify with stock
mldsa.PublicKey44.Verify.

v1 scope is ML-DSA-44, trusted-dealer keygen (matching the paper's
reference), and signer committees of size 2 ≤ t ≤ n ≤ 6. The parameter
table (K, r, r', nu) and sharing patterns are copied verbatim from the
authors' Go reference at github.com/GuilhemN/threshold-ml-dsa-and-raccoon.

Package layout mirrors ecdsatss/eddsatss:
- doc.go         — academic-prototype warning, not production-ready
- params.go      — (t, n) parameter table + honest-signer sharing patterns
- key.go         — Key44 share store + recoverShare per signing subset
- keygen.go      — TrustedDealerKeygen44 (deterministic from 32-byte seed)
- msgsigning.go  — JSON wire messages for rounds 1/2/3
- signature.go   — SignatureData container (raw FIPS 204 bytes)
- signing.go     — Signing44 party state machine (commit hash → reveal w
                   → responses → combine), including the threshold-specific
                   makeHintLowBits44 variant that still yields FIPS 204
                   UseHint-valid hints
- signing_test.go — end-to-end sweep over 14 (t, n) pairs plus context
                   mismatch rejection

DKG, resharing, identifiable aborts, ML-DSA-65/87 variants, and
side-channel resistance of the float64 hyperball sampler are explicit
non-goals for this prototype.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Coverage Stats

542 of 665 new or added lines in 4 files covered. (81.5%)

6 existing lines in 2 files now uncovered.

10319 of 13578 relevant lines covered (76.0%)

2327.49 hits per line