From 27244556e94ce5fb96453a7c1aed724f4b610960 Mon Sep 17 00:00:00 2001 From: William Banfield Date: Thu, 28 Apr 2022 15:35:00 -0400 Subject: [PATCH] clarify summing zero attack --- docs/rfc/rfc-018-bls-agg-exploration.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/rfc/rfc-018-bls-agg-exploration.md b/docs/rfc/rfc-018-bls-agg-exploration.md index ada2b4ad1..7997be965 100644 --- a/docs/rfc/rfc-018-bls-agg-exploration.md +++ b/docs/rfc/rfc-018-bls-agg-exploration.md @@ -347,7 +347,7 @@ detect when verifying each signature individually. However, because BLS signature aggregation creates an aggregated signature and an aggregated public key, a set of colluding signers can create a pair or set -of signatures that aggregate to 0. The signatures that sum zero along with the +of signatures that are non-zero but which aggregate ("sum") to 0. The signatures that sum zero along with the summed public key of the colluding signers will verify any message. This would allow the colluding signers to sign any block or message with the same signature. This would be reasonably easy to detect and create evidence for because, in