Expand description
Verifiable Secret Sharing (VSS) — Feldman VSS over P-256.
Allows shareholders to verify their share is valid (lies on the committed polynomial) without revealing it. Used by CMP20, FROST, and GG18 internally.
§Feldman VSS
The dealer picks a random polynomial f(x) = a_0 + a_1*x + ... + a_{T-1}*x^{T-1}
where a_0 is the secret. They publish commitments C_i = g^{a_i}
for each coefficient. Each shareholder with index j receives
share f(j). They verify: g^{f(j)} == product(C_i^{j^i}).
Structs§
- VssCommitment
- Public commitments from a Feldman VSS deal.