spec/cryptography/Distributed%20Key%20Generation.md

# Distributed Key Generation

Serai uses a modification of the one-round Distributed Key Generation described
in the [eVRF](https://eprint.iacr.org/2024/397) paper. We only require a
threshold to participate, sacrificing unbiased for robustness, and implement a
verifiable encryption scheme such that anyone can can verify a ciphertext
encrypts the expected secret share.
Clean and document the DKG library's encryption Encryption used to be inlined into FROST. When writing the documentation, I realized it was decently hard to review. It also was antagonistic to other hosted DKG algorithms by not allowing code re-use. Encryption is now a standalone module, providing clear boundaries and reusability. Additionally, the DKG protocol itself used to use the ciphersuite's specified hash function (with an HKDF to prevent length extension attacks). Now, RecommendedTranscript is used to achieve much more robust transcripting and remove the HKDF dependency. This does add Blake2 into all consumers yet is preferred for its security properties and ease of review. 2022-12-07 17:20:20 -05:00			`# Distributed Key Generation`

Update spec to the new DKG 2024-08-05 06:58:44 -04:00			`Serai uses a modification of the one-round Distributed Key Generation described`
			`in the [eVRF](https://eprint.iacr.org/2024/397) paper. We only require a`
			`threshold to participate, sacrificing unbiased for robustness, and implement a`
			`verifiable encryption scheme such that anyone can can verify a ciphertext`
			`encrypts the expected secret share.`