Update documentation

[jkatzDfns]

minor changes

[github-actions]

Benchmark Result

Benchmarks

RUST_TESTS_SEED=954e366c35a60bffeabede35bdb7dd763f506932bdec5e64d8ba4b2a2fc1cd82
n = 3

Non-threshold DKG
Protocol Performance:
  - Protocol took 429.80µs to complete
In particular:
  - Stage: 6.22µs
    - Setup networking: 5.98µs (96.1%)
    - Unstaged: 241.00ns (3.9%)
  - Round 1: 144.67µs
    - Compute execution id: 4.04µs (2.8%)
    - Sample x_i, rid_i, chain_code: 64.57µs (44.6%)
    - Sample schnorr commitment: 59.05µs (40.8%)
    - Commit to public data: 16.67µs (11.5%)
    - Unstaged: 340.00ns (0.2%)
  - Round 2: 4.84µs
    - Hash received msgs (reliability check): 4.66µs (96.3%)
    - Unstaged: 181.00ns (3.7%)
  - Round 3: 280.00ns
    - Assert other parties hashed messages (reliability check): 150.00ns (53.6%)
    - Unstaged: 130.00ns (46.4%)
  - Round 4: 36.04µs
    - Validate decommitments: 30.50µs (84.6%)
    - Calculate chain_code: 762.00ns (2.1%)
    - Calculate challege rid: 4.39µs (12.2%)
    - Prove knowledge of `x_i`: 241.00ns (0.7%)
    - Unstaged: 150.00ns (0.4%)
  - Round 5: 237.75µs
    - Validate schnorr proofs: 237.42µs (99.9%)
    - Unstaged: 330.00ns (0.1%)


Threshold DKG
Protocol Performance:
  - Protocol took 1.26ms to complete
In particular:
  - Stage: 1.84µs
    - Setup networking: 1.74µs (94.6%)
    - Unstaged: 100.00ns (5.4%)
  - Round 1: 211.71µs
    - Compute execution id: 1.23µs (0.6%)
    - Sample rid_i, schnorr commitment, polynomial, chain_code: 187.31µs (88.5%)
    - Commit to public data: 22.98µs (10.9%)
    - Unstaged: 181.00ns (0.1%)
  - Round 2: 1.17µs
    - Hash received msgs (reliability check): 1.02µs (87.1%)
    - Unstaged: 151.00ns (12.9%)
  - Round 3: 351.00ns
    - Assert other parties hashed messages (reliability check): 220.00ns (62.7%)
    - Unstaged: 131.00ns (37.3%)
  - Round 4: 774.61µs
    - Validate decommitments: 44.39µs (5.7%)
    - Validate data size: 290.00ns (0.0%)
    - Validate Feldmann VSS: 354.13µs (45.7%)
    - Compute rid: 351.00ns (0.0%)
    - Compute chain_code: 1.09µs (0.1%)
    - Compute Ys: 358.86µs (46.3%)
    - Compute sigma: 441.00ns (0.1%)
    - Calculate challenge: 14.58µs (1.9%)
    - Prove knowledge of `sigma_i`: 331.00ns (0.0%)
    - Unstaged: 140.00ns (0.0%)
  - Round 5: 266.28µs
    - Validate schnorr proofs: 264.75µs (99.4%)
    - Derive resulting public key and other data: 1.36µs (0.5%)
    - Unstaged: 171.00ns (0.1%)


Auxiliary data generation protocol
Protocol Performance:
  - Protocol took 9.60s to complete
In particular:
  - Stage: 11.69µs
    - Retrieve auxiliary data: 190.00ns (1.6%)
    - Setup networking: 10.35µs (88.5%)
    - Precompute execution id and shared state: 1.05µs (9.0%)
    - Unstaged: 100.00ns (0.9%)
  - Round 1: 1.17s
    - Retrieve primes (p and q): 80.00ns (0.0%)
    - Compute paillier decryption key (N): 4.35µs (0.0%)
    - Generate auxiliary params r, λ, t, s: 9.01ms (0.8%)
    - Prove Πprm (ψˆ_i): 1.16s (99.2%)
    - Sample random bytes: 1.73µs (0.0%)
    - Compute hash commitment and sample decommitment: 298.47µs (0.0%)
    - Unstaged: 250.00ns (0.0%)
  - Round 2: 1.53µs
    - Hash received msgs (reliability check): 991.00ns (64.6%)
    - Unstaged: 542.00ns (35.4%)
  - Round 3: 541.00ns
    - Assert other parties hashed messages (reliability check): 310.00ns (57.3%)
    - Unstaged: 231.00ns (42.7%)
  - Round 4: 5.92s
    - Validate round 1 decommitments: 537.49µs (0.0%)
    - Validate П_prm (ψ_i): 2.30s (38.8%)
    - Add together shared random bytes: 1.42µs (0.0%)
    - Compute П_mod (ψ_i): 3.45s (58.3%)
    - Assemble security params for П_fac (ф_i): 5.27µs (0.0%)
    - Compute П_fac (ф_i^j): 171.23ms (2.9%)
    - Unstaged: 1.02µs (0.0%)
  - Round 5: 2.51s
    - Validate ψ_j (П_mod): 2.34s (93.1%)
    - Validate ф_j (П_fac): 172.08ms (6.9%)
    - Assemble auxiliary info: 145.43µs (0.0%)
    - Unstaged: 2.20µs (0.0%)


Signing protocol
Protocol Performance:
  - Protocol took 4.16s to complete
In particular:
  - Stage: 139.29µs
    - Map t-out-of-n protocol to t-out-of-t: 69.67µs (50.0%)
    - Retrieve auxiliary data: 66.10µs (47.5%)
    - Precompute execution id and security params: 461.00ns (0.3%)
    - Setup networking: 2.96µs (2.1%)
    - Unstaged: 100.00ns (0.1%)
  - Round 1: 188.70ms
    - Generate local ephemeral secrets (k_i, y_i, p_i, v_i): 48.10µs (0.0%)
    - Encrypt G_i and K_i: 107.60ms (57.0%)
    - Prove ψ0_j: 81.05ms (43.0%)
    - Unstaged: 923.00ns (0.0%)
  - Round 2: 13.51µs
    - Hash received msgs (reliability check): 13.30µs (98.4%)
    - Unstaged: 211.00ns (1.6%)
  - Round 3: 2.23s
    - Assert other parties hashed messages (reliability check): 611.00ns (0.0%)
    - Verify psi0 proofs: 268.70ms (12.1%)
    - Sample random r, hat_r, s, hat_s, beta, hat_beta: 49.51µs (0.0%)
    - Encrypt D_ji: 70.51ms (3.2%)
    - Encrypt F_ji: 35.78ms (1.6%)
    - Encrypt hat_D_ji: 559.62ms (25.1%)
    - Encrypt hat_F_ji: 35.79ms (1.6%)
    - Prove psi_ji: 791.10ms (35.5%)
    - Prove psiˆ_ji: 208.86ms (9.4%)
    - Prove psi_prime_ji : 257.98ms (11.6%)
    - Unstaged: 851.00ns (0.0%)
  - Round 4: 1.56s
    - Retrieve auxiliary data: 4.06µs (0.0%)
    - Validate psi: 164.68ms (10.6%)
    - Validate hat_psi: 164.31ms (10.5%)
    - Validate psi_prime: 934.42ms (59.9%)
    - Compute Gamma, Delta_i, delta_i, chi_i: 215.08ms (13.8%)
    - Prove psi_prime_prime: 81.38ms (5.2%)
    - Unstaged: 553.00ns (0.0%)
  - Presig output: 185.02ms
    - Validate psi_prime_prime: 184.89ms (99.9%)
    - Calculate presignature: 133.96µs (0.1%)
    - Unstaged: 550.00ns (0.0%)
  - Partial signing: 9.74µs
  - Signature reconstruction: 201.75µs

[github-actions]

The spec was successfully compiled. PDF is available here.

[maurges]

Decided to rebase this to m and update

[survived]

I merged the readme with more recently updated cggmp21 announcement that was also spell-checked by Jon

[maurges]

Huh, our usage of the word "threshold" has changed a lot over time