We construct new multi-signature schemes that provide new functionality. Our schemes are
designed to reduce the size of the Bitcoin blockchain, but are useful in many other settings …

We describe a new Schnorr-based multi-signature scheme (ie, a protocol which allows a
group of signers to produce a short, joint signature on a common message) called MuSig …

Multi-signatures enable a group of signers to produce a joint signature on a joint message.
Recently, Drijvers et al.(S&P'19) showed that all thus far proposed two-round multi-signature …

Cloud storage service providers such as Dropbox, Mozy, and others perform deduplication
to save space by only storing one copy of each file uploaded. Should clients conventionally …

Threshold signatures are a crucial tool for many distributed protocols. As shown by Cachin,
Kursawe, and Shoup (PODC'00), schemes with unique signatures are of particular …

We prove adaptive security of a simple three-round threshold Schnorr signature scheme,
which we call Sparkle. The standard notion of security for threshold signatures considers a …

Abstract Password-Authenticated Key Exchange (PAKE) protocols allow two parties that
only share a password to establish a shared key in a way that is immune to offline attacks …

We propose a robust proactive threshold signature scheme, a multisignature scheme and a
blind signature scheme which work in any Gap Diffie-Hellman (GDH) group (where the …

Abstract Cryptographic protocols for Private Set Intersection (PSI) are the basis for many
important privacy-preserving applications. Over the past few years, intensive research has …

Blockchain technologies recently received a considerable amount of attention. While the
initial focus was mainly on the use of blockchains in the context of cryptocurrencies such as …