Distributed Key Generation Protocols
Explore DKG protocols that let parties jointly generate a shared key where no single party knows the whole secret.
DKG Goal and Motivation
Distributed Key Generation (DKG) solves the trusted dealer problem in threshold cryptography. Without DKG, a central party must generate the key pair and distribute shares, knowing the full private key momentarily. DKG allows n parties to jointly generate a public/private key pair through a protocol where no single party learns the private key, even the protocol coordinator.
Pedersen DKG (1991)
Pedersen DKG was the first practical DKG protocol, published in 1991. Each of the n parties generates a random secret s_i and runs a Verifiable Secret Sharing (VSS) protocol to share it. Each party broadcasts commitments to their polynomial coefficients. After all parties share their contributions, the combined secret is the sum of all s_i values, and each party holds a share of this sum.
All lessons in this course
- Threshold Signature Schemes: Concepts
- Threshold ECDSA: Multi-Party Signing
- Distributed Key Generation Protocols
- Threshold Schemes in Blockchains and HSMs