package crypto.wsts

Get desktop application:
View/edit binary Protocol Buffers messages

A bad private share

Used in: BadPrivateShares

• optional Point shared_key = 1

  The DH shared key between these participants

• optional TupleProof tuple_proof = 2

  Proof that the shared key is a valid DH tuple as per Chaum-Pedersen.

DKG private shares were bad from these signer_ids.

Used in: DkgStatus

• map<uint32, BadPrivateShare> shares = 1

DKG public shares were bad from these signer_ids.

Used in: DkgStatus

• map<uint32, SetValueZst> signer_ids = 1

  In WSTS this is a HashSet<u32>, so these should be unique, duplicates will be ignored at the application level.

Signer was in the wrong internal state to complete DKG

Used in: DkgStatus

(message has no fields)

DKG begin message from coordinator to signers This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L123-L128>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

DKG end message from signers to coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L246-L255>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint32 signer_id = 2

  Signer ID

• optional DkgStatus status = 3

  DKG status for this Signer after receiving public/private shares

DKG end begin message from signer to all signers and coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L222-L231>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• repeated uint32 signer_ids = 2

  Signer IDs who responded in time for this DKG round

• repeated uint32 key_ids = 3

  Key IDs who responded in time for this DKG round

DKG private begin message from signer to all signers and coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L162-L171>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• repeated uint32 signer_ids = 2

  Signer IDs who responded in time for this DKG round

• repeated uint32 key_ids = 3

  Key IDs who responded in time for this DKG round

DKG private shares message from signer to all signers and coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L185-L195>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint32 signer_id = 2

  Signer ID

• repeated PrivateShare shares = 3

  List of (src_signer_id, Map(dst_key_id, encrypted_share))

• map<uint32, SignerDkgPublicShares> shares = 1

Final DKG status after receiving public and private shares This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L72-L79> combined with this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L57-L70>

Used in: DkgEnd

• oneof mode

  • Success success = 1

    DKG completed successfully

  • BadState bad_state = 2

    Signer was in the wrong internal state to complete DKG

  • MissingPublicShares missing_public_shares = 3

    DKG public shares were missing from these signer_ids

  • BadPublicShares bad_public_shares = 4

    DKG public shares were bad from these signer_ids

  • MissingPrivateShares missing_private_shares = 5

    DKG private shares were missing from these signer_ids

  • BadPrivateShares bad_private_shares = 6

    DKG private shares were bad from these signer_ids

  • Threshold threshold = 7

    The DKG threshold was not met

Used in: SignatureType

(message has no fields)

A merkle root is a 256 bit hash This maps to this type <https://github.com/Trust-Machines/wsts/blob/10760178d88c779d9377641e360656b27c05a771/src/common.rs#L22-L23>

Used in: TaprootSignatureType

• optional Uint256 root = 1

  The root of the merkle tree

DKG private shares were missing from these signer_ids.

Used in: DkgStatus

• map<uint32, SetValueZst> signer_ids = 1

  In WSTS this is a HashSet<u32>, so these should be unique, duplicates will be ignored at the application level.

DKG public shares were bad from these signer_ids.

Used in: DkgStatus

• map<uint32, SetValueZst> signer_ids = 1

  In WSTS this is a HashSet<u32>, so these should be unique, duplicates will be ignored at the application level.

Nonce request message from coordinator to signers This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L265-L280>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint64 sign_id = 2

  Signing round ID

• uint64 sign_iter_id = 3

  Signing round iteration ID

• bytes message = 4

  The message to sign

• optional SignatureType signature_type = 5

  What type of signature to create

Nonce response message from signers to coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L309-L326>

Used in: SignatureShareRequest, stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint64 sign_id = 2

  Signing round ID

• uint64 sign_iter_id = 3

  Signing round iteration ID

• uint32 signer_id = 4

  Signer ID

• repeated uint32 key_ids = 5

  Key IDs

• repeated PublicNonce nonces = 6

  Public nonces

• bytes message = 7

  Bytes being signed.

The public polynomial committed to by one of the party members who are participating in distributed key generation. This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L144-L145>

Used in: SignerDkgPublicShares

• uint32 signer_id = 1

  The specific party that submitted the public polynomial.

• optional PolyCommitment commitment = 2

  The public polynomial of the associated party. Each polynomial includes a proof of ownership of the underlying private private polynomial.

The saved state required to reconstruct a party https://github.com/Trust-Machines/wsts/blob/91a37c8a097e6fa5d5a67519a72567bc82560c0d/src/traits.rs#L14-L23

Used in: SignerState

• uint32 key_id = 1

• optional Polynomial polynomial = 2

  The party's private polynomial

• repeated PrivateKeyShare private_keys = 3

  The key IDS and associate private keys for this party

• optional PrivateNonce nonce = 4

  The nonce being used by this party

A commitment to a polynomial, with a Schnorr proof of ownership bound to the ID This maps to this type <https://github.com/Trust-Machines/wsts/blob/10760178d88c779d9377641e360656b27c05a771/src/common.rs#L25-L32>

Used in: PartyCommitment

• optional ProofIdentifier id = 1

  The party ID with a Schnorr proof

• repeated Point poly = 2

  The public polynomial which commits to the secret polynomial

A polynomial. https://github.com/Trust-Machines/wsts/blob/91a37c8a097e6fa5d5a67519a72567bc82560c0d/src/traits.rs#L14-L23

Used in: PartyState

• repeated Scalar data = 1

  The coefficients of a polynomial.

The private key share received from another signer

Used in: PartyState

• uint32 key_id = 1

  The identifier for the private key share. It is unique across all keys in a DKG round.

• optional Scalar private_key = 2

  The private key share.

A nonce https://github.com/Trust-Machines/wsts/blob/10760178d88c779d9377641e360656b27c05a771/src/common.rs#L51-L58

Used in: PartyState

• optional Scalar nonce_d = 1

  A nonce's first value

• optional Scalar nonce_e = 2

  A nonce's second value

This was created This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L193-L194>

Used in: DkgPrivateShares

• uint32 source_signer_id = 1

  The ID of the signer that created the secret share.

• repeated SecretShare encrypted_shares = 2

  The encrypted private shares to send to another parties.

This type maps to the `ID` type in WSTS, which encapsulates the ID and a Schnorr proof of ownership of the polynomial. This maps to this type <https://github.com/Trust-Machines/wsts/blob/7435dec216aab547133de0dc2915e49875630c84/src/schnorr.rs#L12-L23>

Used in: PolyCommitment

• optional Scalar id = 1

  The ID

• optional Point schnorr_response = 2

  The public Schnorr response, kG

• optional Scalar aggregate_commitment = 3

  The aggregate of the Schnorr committed values, kca

A commitment to the private nonce This maps to this type <https://github.com/Trust-Machines/wsts/blob/10760178d88c779d9377641e360656b27c05a771/src/common.rs#L94-L102>

Used in: NonceResponse

• optional Point nonce_d = 1

  A commitment to the private nonce's first value

• optional Point nonce_e = 2

  A commitment to the private nonce's second value

Used in: TupleProof

• optional Point random_commitment = 1

  This is R, where R = r*G for a random scalar r.

• optional Scalar response = 2

  This is z, where z = r + a*s where s = H(G,A,B,K,R) as per Fiat-Shamir

Used in: SignatureType

(message has no fields)

This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L193-L194>

Used in: PrivateShare

• uint32 signer_id = 1

  The signer ID associated with the secret share. This is the only signer who will be able to decrypt the encrypted_secret_share field.

• bytes encrypted_secret_share = 2

  This is the private polynomial evaluated at the `signer_id` and then encrypted in such a way that only the public key associated with the above `signer_id` can decrypt it.

A share of the party signature with related values This maps to this type <https://github.com/Trust-Machines/wsts/blob/10760178d88c779d9377641e360656b27c05a771/src/common.rs#L120-L129>

Used in: SignatureShareResponse

• uint32 id = 1

  The ID of the party

• optional Scalar signature_share = 2

  The party signature, z_i

• repeated uint32 key_ids = 3

  The key IDs of the party

Signature share request message from coordinator to signers This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L370-L387>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint64 sign_id = 2

  Signing round ID

• uint64 sign_iter_id = 3

  Signing round iteration ID

• repeated NonceResponse nonce_responses = 4

  Nonces responses used for this signature

• bytes message = 5

  Bytes to sign.

• optional SignatureType signature_type = 6

  What type of signature to create

Signature share response message from signers to coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L422-L435>

Used in: stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint64 sign_id = 2

  Signing round ID

• uint64 sign_iter_id = 3

  Signing round iteration ID

• uint32 signer_id = 4

  Signer ID

• repeated SignatureShare signature_shares = 5

  Signature shares from this Signer

Signature type This maps to this type <https://github.com/Trust-Machines/wsts/blob/ebd7d7775ad5e44cdbf4f5c1fb468bdf6c467265/src/net.rs#L373-L382>

Used in: NonceRequest, SignatureShareRequest

• oneof signature_type

  • FrostSignatureType frost = 1

    FROST signature

  • SchnorrSignatureType schnorr = 2

    BIP-340 Schnorr proof

  • TaprootSignatureType taproot = 3

    BIP-341 Taproot style schnorr proof with a merkle root

DKG public shares message from a signer to all signers and coordinator This maps to this type <https://github.com/Trust-Machines/wsts/blob/2d6cb87218bb8dd9ed0519356afe57a0b9a697cb/src/net.rs#L137-L146>

Used in: DkgPublicShares, stacks.signer.v1.WstsMessage

• uint64 dkg_id = 1

  DKG round ID

• uint32 signer_id = 2

  Signer ID

• repeated PartyCommitment commitments = 3

  List of (signer_id, commitment)

https://github.com/Trust-Machines/wsts/blob/91a37c8a097e6fa5d5a67519a72567bc82560c0d/src/traits.rs#L25-L42 The saved state required to reconstruct a WSTS signer object. This is the protobuf version of the state object. It is encrypted and stored in the database.

• uint32 id = 1

  The signer ID

• repeated uint32 key_ids = 2

  The key IDs this signer controls

• uint32 num_keys = 3

  The total number of keys

• uint32 num_parties = 4

  The total number of parties

• uint32 threshold = 5

  The threshold for signing

• optional Point group_key = 6

  The aggregate group public key

• repeated PartyState parties = 7

  The party IDs and associated state for this signer

DKG completed successfully

Used in: DkgStatus

(message has no fields)

Used in: SignatureType

• optional MerkleRoot merkle_root = 1

  Taproot merkle root. This field is optional

The DKG threshold has not been upheld by the coordinator.

Used in: DkgStatus

(message has no fields)

A Chaum-Pedersen proof that (G, A=a*G, B=b*G, K=(a*b)*G) is a Diffie-Hellman tuple. This maps to this type <https://github.com/Trust-Machines/wsts/blob/10760178d88c779d9377641e360656b27c05a771/src/common.rs#L163-L172>

Used in: BadPrivateShare

• optional Point combined_commitment = 1

  This is a commitment to both the random commitment in the Schnorr proof and the private key used for the signature. It represents r*B.

• optional SchnorrProof signature = 2

  The Schnorr proof using the commitment of the above Point.