cosign
cosign copied to clipboard
Cooperative RSA signing
Is there someway to modify the key shards to work with hardware tokens that expect CRT parameters or primes? Or are there hardware tokens that can operate on the (n,e,d)...
Is there any danger of private shards leaking their (non-prime) d values in the signed output?
There are lots of papers on using oblivious transfer or other mechanisms to generate the private key so that it never lives in one place. An example protocol: https://medium.com/@benny.pinkas/fast-distributed-rsa-key-generation-against-malicious-adversaries-faaaab96821d >...