Module refresh 

Proactive refresh (Herzberg et al. 1995 pattern).

Periodic share refresh invalidates previously-compromised shares without changing the public key. Each party generates a random polynomial with f_i(0) = 0; sum of all contributions at any point is zero, so adding refresh contributions to existing shares does not change the aggregate secret.

Structs

RefreshContribution

A refresh contribution from party i to party j.

RefreshParams

Parameters for a refresh round.

Functions

apply_refresh

Compute the new share given an old share and a set of refresh contributions.

verify_refresh_preserves_aggregate

Verify that a refresh round preserves the aggregate secret.