A command-line tool for creating and verifying distributed multi-party signatures.
Installation
$ virtualenv env $ . env/bin/activate $ pip install -e .
Usage
Key generation
On one machine, run:
$ partysig keygen start
On the other machines, run:
$ partysig keygen join
Signing
On the machine with the file to sign, run:
$ partysig sign start FILE
On the other machines, run:
$ partysig sign join
Verifying signatures
Run:
$ partysig verify FILE SIGNATURE
Design
The current signature version (v1) implements Bitcoin-style multi-sig, where the overall multisignature contains:
The number of signatures required for the multisignature to be valid
The public keys allowed to create signatures
Signatures from a subset of those keys
The first two parts together are equivalent to a Bitcoin script, and are similarly hashed to get the “master key” for the multi-party signature group. Ed25519 is used for the individual signatures, and BLAKE2b is used for creating the master key.
Signature format
Version (1-byte uint) \ Threshold (1-byte uint) |_ Hashed to obtain Size (1-byte uint) | the master key Pubkeys (32 x size bytes) / Signatures (64 x threshold bytes)
Acknowledgements
Joanna Rutkowska asked the question that prompted the creation of this tool.
Brian Warner wrote Magic Wormhole, which is a key component to this tool’s usability.
1 maintainer
Release files for partysig 0.0.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| partysig-0.0.1.tar.gz | 22.7 kB | Details |
Release files / partysig-0.0.1.tar.gz
| Download URL | partysig-0.0.1.tar.gz |
|---|---|
| Size | 22.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
43ceb505b993f75df8d32271ad6ba66f3111b4c84c516238160c858f56ee9043
|
|
BLAKE2b-256 checksum How to use checksums |
7216e69b53c5f753dfd1e3e6ce5763a2b7d5874cc0bc9fe87b4ca8066955a1b9
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
