Date Published: January 25, 2023
Comments Due:
Email Questions to:
Author(s)
Luís T. A. N. Brandão (Strativia), Rene Peralta (NIST)
Announcement
NIST requests public comments on NIST IR 8214C ipd (initial public draft), NIST First Call for Multi-Party Threshold Schemes, for primitives organized into two categories:
- Cat1: selected NIST-specified primitives
- Cat2: other primitives not specified by NIST
The report specifies the various categories, subcategories, and requirements for a successful submission, including security characterization, technical description, open-source implementation, and performance evaluation. The process intends to help the NIST cryptographic technology group collect reference material to promote a public analysis of the viability of threshold schemes and related primitives. This will support the NIST multi-party threshold cryptography and privacy-enhancing cryptography projects in developing future recommendations.
Threshold schemes should NOT be submitted until the final version of this report is published. However, using the present draft as a baseline, potential submitters are encouraged to prepare early for future submissions.
The public comment period is open through April 10, 2023. Public comments to be considered for the final report should be submitted by email to nistir-8214C-comments@nist.gov. We encourage you to use this comment template when preparing your feedback comments. Proper comments will later be compiled and made publicly available along with the final version of this report.
For announcements and discussion of NIST’s Multi-Party Threshold Cryptography project, please join the MPTC-forum.
NOTE: A call for patent claims is included on page iii of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy – Inclusion of Patents in ITL Publications.
This document calls for public submissions of multi-party threshold schemes, to support the National Institute of Standards and Technology (NIST) in developing future recommendations and guidelines. In a threshold scheme, an underlying key-based cryptographic primitive is executed while a private/secret key is or becomes secret-shared across various parties. Submissions in response to this call should include security characterization, technical description, open-source implementation, and performance evaluation. Submitted threshold schemes should produce outputs that are “interchangeable” with a key-based cryptographic primitive of interest. There are two categories of primitives for the submission of threshold schemes: Cat1, for selected NIST-specified primitives; and Cat2, for primitives not specified by NIST, but which are friendlier (more amenable to) to the threshold paradigm, have enhanced functional features, or/and are based on different cryptographic assumptions. The analysis of Cat1-submissions will help develop future recommendations and guidelines for threshold implementations of the corresponding NIST-specified primitives. The analysis of Cat2-submissions will help assess new interests on primitives not standardized by NIST.
This document calls for public submissions of multi-party threshold schemes, to support the National Institute of Standards and Technology (NIST) in developing future recommendations and guidelines. In a threshold scheme, an underlying key-based cryptographic primitive is executed while a...
See full abstract
This document calls for public submissions of multi-party threshold schemes, to support the National Institute of Standards and Technology (NIST) in developing future recommendations and guidelines. In a threshold scheme, an underlying key-based cryptographic primitive is executed while a private/secret key is or becomes secret-shared across various parties. Submissions in response to this call should include security characterization, technical description, open-source implementation, and performance evaluation. Submitted threshold schemes should produce outputs that are “interchangeable” with a key-based cryptographic primitive of interest. There are two categories of primitives for the submission of threshold schemes: Cat1, for selected NIST-specified primitives; and Cat2, for primitives not specified by NIST, but which are friendlier (more amenable to) to the threshold paradigm, have enhanced functional features, or/and are based on different cryptographic assumptions. The analysis of Cat1-submissions will help develop future recommendations and guidelines for threshold implementations of the corresponding NIST-specified primitives. The analysis of Cat2-submissions will help assess new interests on primitives not standardized by NIST.
Hide full abstract
Keywords
cryptography; distributed systems; provable security; secure multi-party computation; standards; threshold cryptography; threshold schemes
Control Families
None selected
