David Semakula

@rustbot claim

@ivokub replacing FS-DKR with aux info & key refresh from CGGMP paper.

@ivokub So as we discussed, the main consideration for CGGMP refresh vs FS-DKR was a possible difference in the security assumptions, as I agree that it's much simpler to change...

@ivokub I think we should implement it, the attack you linked is essentially an unpatched vulnerability for both this library and [multi-party-ecdsa](https://github.com/ZenGo-X/multi-party-ecdsa). @drewstone I remember there was some kind of...

> Hmm, I think the check is done transitively in FS-DKR. [Here](https://github.com/webb-tools/cggmp-threshold-ecdsa/blob/main/fs-dkr/src/refresh_message.rs#L126C14-L126C14) we create `NiCorrectKeyProof` which seems to be implementing https://eprint.iacr.org/2018/057.pdf. CGGMP paper defines PI-mod to be a simplification of...