clarify summing zero attack

This commit is contained in:
William Banfield
2022-04-28 15:35:00 -04:00
parent 888fdc849f
commit 27244556e9
+1 -1
View File
@@ -347,7 +347,7 @@ detect when verifying each signature individually.
However, because BLS signature aggregation creates an aggregated signature and
an aggregated public key, a set of colluding signers can create a pair or set
of signatures that aggregate to 0. The signatures that sum zero along with the
of signatures that are non-zero but which aggregate ("sum") to 0. The signatures that sum zero along with the
summed public key of the colluding signers will verify any message. This would
allow the colluding signers to sign any block or message with the same signature.
This would be reasonably easy to detect and create evidence for because, in