Frost Roundtable Slides

## <img src="https://hackmd.io/_uploads/HkEB3VdmT.jpg" width=1024> FROST Implementers Roundtable 2023-11-08 </center> --- ## <img src="https://i.imgur.com/QyDl5nK.png" width="192" height="192"> What is Blockchain Commons? * We are a community interested in self-sovereign control of digital assets. * We bring together stakeholders to collaboratively develop interoperable infrastructure. * We design decentralized solutions where everyone wins. * We are a neutral "not-for-profit" that enables people to control their own digital destiny. --- Thank you to our Sponsors! <img src="https://hackmd.io/_uploads/Hy1azQDGp.png" style="border: 1px white solid;"> Become a sponsor! Mail us at team@blockchaincommons.com --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Personal Introductions * Introducing Our Participants * Who Are You? * What's Your Association with FROST? * We'll get to project status in a minute! --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Intro Ice Breakers _Choose One!_ * What do you love most about FROST? * What has been the most difficult about FROST? * What was the biggest road block that you overcame? * What coming up is your biggest concern? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Project Introductions * Major Repos * Zcash FROST * secp-zkp FROST * Other Code Bases * Brief(!) Status * What's the current progress? What's next on your roadmap? * Are security reviews planned? * Any standardization efforts? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Distributed Key Generation * What are unimplemented advantages or drawbacks of DKG? * Any progress on quorum rotation? * Any opportunities (or risks) to leverage FROST's DKG and shares for other cryptographic protocols? * Any risks to using FROST for quorum encryption/decryption of symmetric keys that encrypt larger packages? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Trusted Dealer Generation * The Zcash project also offers Trusted Dealer Generation. Any one else planning to offer it? * What advantages might Trusted Dealer Generation add? * Any thoughts on Trusted Dealer Generation in personal devices for "self-sovereign" keys? * Should other protocols currently doing SSS transition to leverage the VSS in Trusted Dealer? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Resilience & Trust * What level of care is needed to protect the generated shares? * What reliability issues? Etc. * Are there concerns of correlation or DOS attacks that need to be addressed? * What are the requirements for trust in wallets? * What changes to trust models for wallets are needed given the improvements of DKG? * Can we increase trust by implementing parts of FROST in silicon? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Curves * Can FROST leverage existing ed25519 key infrastructure by converting to ristretto keys and back? Or do we need to move completely to ristretto for that family of FROST? * Can a single Distributed Key Generation be used for both ristretto and secp256k1? * Can a single Trusted Dealer Generation be used for both ristretto and secp256k1? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Trusted Channels * FROST Distributed Key Generation (DKG) requires trusted channels. Any particular progress or requirements for this? * FROST Signing doesn't "require" trusted channels, but there are also privacy/correlation issues if signing over untrusted channels. Any progress/requirements on these? * What other kinds of alignment with FROST crypto do we need to work on: identifiers, elligator, anti-correlation, etc. --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Performance * Any particular performance issues with your FROST implementation? * What are the minimal processor requirements? Can we implement on low-power devices? * Are their opportunties to increase performance (and/or increase security) by implementing some algorithms in silicon? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Standards & Other Protocols * Any opportunties for international standards? * Roadmap for the IETF? * IETF CBOR for FROST data formats? * Any wild-card uses of FROST the community is not considering? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> Cryptography * Any progress on ROAST? Other variants of FROST? * What other proofs can a FROST quorum do? * FROST Schnorr is a "nonaccountable" signature as you don't know who signed, but is there a version where a quorum can prove which of the members did sign? * Any interesting zk-proofs opportunites? * Opportunities to leverage Musig2 with FROST? * Other related cryptography? --- ## <img src="https://i.imgur.com/QyDl5nK.png" width=192 height="192"> The Next Step * How do we convince more developers to use FROST? * How do we convince users to use FROST? * Any tooling (CLI apps, server apps, testing frameworks, etc.) that would help developers or that you'd like to see soon? * How do we fund more code reviews? * In addition to hosting activities like these, is there anything else Blockchain Commons can do to help the community? --- <img src="https://i.imgur.com/QyDl5nK.png" width="128" height="128"> www.BlockchainCommons.com <img src="https://avatars.githubusercontent.com/ChristopherA?s=195"> Christopher Allen (@ChristopherA)