Module keygen 

GG18 distributed key generation over P-256.

Each party acts as a Feldman-VSS dealer for a fresh random secret. After both rounds every party holds a combined share x_i = sum_d f_d(i) and the joint public key X = prod_d g^{secret_d} = g^{sum secret_d}. The combined secret is never reconstructed.

Rounds

• Round 1 — deal. Broadcast Feldman commitments + direct-send each peer its polynomial evaluation.
• Round 2 — verify and assemble. Verify every received share against the broadcast commitments, sum per-dealer shares into x_i, compute the joint public key. Complete.

Structs

Gg18DkgP256

GG18 DKG scheme over P-256. Registered as GG18-ECDSA-P256.

Gg18DkgSession

Functions

parse_share

Parse a DKG-produced share blob.