Threshold ML-DSA Implementation

This repository contains implementations from the research paper:

"Efficient Threshold ML-DSA up to 6 parties"

Warning

These implementations are academic proof-of-concept prototypes, have not received careful code review, and are not ready for production use.

Structure

This repository includes the following implementation:

• implementation: Threshold ML-DSA implementation (our scheme) based on the CIRCL library. Note that we use only the needed functionality from CIRCL.

We additionally provide our benchmarking tools:

• go-libp2p folder: Threshold ML-DSA was evaluated with go-libp2p for LAN/WAN experiments, see go-libp2p/examples/chat (both the chat.go and thchat.go files). Note that we include the codebase of go-libp2p with an example modified.
• threshold-mldsa-bench folder: Threshold ML-DSA local benchmarking tools.

We also include the parameter selection scripts:

• params: Parameter scripts for Threshold ML-DSA.

Building and Testing

Prerequisites

• Go 1.19 or later

Building

On each folder (except params) run:

make build

Testing

On implementation folder run:

make test

Benchmarking

Local Benchmarks

Navigate to the threshold-mldsa-bench directory and run:

cd threshold-mldsa-bench
go run main.go type=d iter=<iterations> t=<threshold> n=<parties>

Parameters:

• iter: Number of iterations to average latencies over (use 1 for single run)
• t: Threshold value (number of parties required to sign)
• n: Total number of parties (maximum 6 parties allowed)

Example:

# Run 100 iterations with threshold 3 out of 5 parties
go run main.go type=d iter=100 t=3 n=5

Network Benchmarks (LAN/WAN)

Use the go-libp2p chat example for distributed experiments. We provide two files chat.go and thchat.go.

Chat.go

You can build via:

cd go-libp2p/examples/chat
go build chat chat.go

Then run on two different machines:

# On the first machine (server)
./chat -sp <PORT> -id 0 -n <N>

# This will print the adress to connect to
# On another machine (client)
./chat -d /ip4/<SERVER_IP>/tcp/<PORT>/p2p/<PEER_ID> -id 1 -n <N>

Thchat.go

You can build via:

cd go-libp2p/examples/thchat
go build thchat thchat.go

Then run on two different machines:

# On the first machine (party 0, listener)
./thchat -sp <PORT> -t <T> -n <N>

# This will print its /ip4/.../p2p/<PEER_ID> multiaddr.
# Use that as ADDR_A.

# On the second machine (party 1)
./thchat -sp 0 -t <T> -n <N> -d <ADDR_A>

# On the third machine (party 2)
./thchat -sp 0 -t <T> -n <N> -d <ADDR_A>,<ADDR_B>

# On the fourth machine (party 3)
./thchat -sp 0 -t <T> -n <N> -d <ADDR_A>,<ADDR_B>,<ADDR_C>