New paper accepted at EUROCRYPT 2026

Fully-Adaptive Two-Round Threshold Schnorr Signatures from DDH

We are happy to announce that our paper “Fully-Adaptive Two-Round Threshold Schnorr Signatures from DDH” has been accepted to EUROCRYPT 2026.

Abstract:

Threshold Schnorr signatures enable t-out-of-n parties to collaboratively produce signatures that are indistinguishable from standard Schnorr signatures, ensuring compatibility with existing verification systems. While static-secure constructions are well understood and achieve optimal round complexity, obtaining full adaptive security - withstanding up to t − 1 dynamic corruptions - under standard assumptions has proven elusive. Recent impossibility results either rule out known proof techniques for widely deployed schemes or require speculative assumptions and idealized models, while positive examples achieving full adaptivity from falsifiable assumptions incur higher round complexity.

In this work, we overcome these barriers with the first round-optimal threshold Schnorr signature scheme that, under a slightly relaxed security model, achieves full adaptive security from DDH in the random oracle model. In our model, the adversary may adaptively corrupt parties at any time, but each signer must refresh part of their public key after a fixed number of signing queries. These updates are executed via lightweight, succinct, stateless tokens, preserving the aggregated signature format. Our construction is enabled by a new proof technique called equivocal deterministic nonce derivation, which may be of independent interest.

More details and the full preprint are available via the IACR ePrint Archive.

Want to read more? Check this out: https://eprint.iacr.org/2025/1478