• [ ] Read the BIP
  • some sections of the bip could be copied over to FROST Signing
    • like “Protocol Parties & Setup”
    • some bullet points of “Design” section
• [x] Read the Code
  • [ ] example
  • [ ] tests
• [ ] Read Footnotes (while reading the BIP again!)
• [ ] Upload code & readme to chatgpt (maybe the research one?), and ask for its suggestions
• [ ] Post suggestions to GitHub repo

Doubts

Literature

ChillDKG Terminologies

Notes on ChillDKGP BIP

SimplPedPop

EncPedPop

ChillDKG

Usage section

Python Code

Q: SimplPedPop’s round 2 runs the CertEq check exclusively! That is, it doesn’t share other PedPoP-related data

• Does this mean other PedPop variants (like the one in FROST) can be performed in a single round? Since, they assume a broadcast channel, hence don’t required another round for an external equality check protocol.

Q: Can a participant re-compute their secshare from ChillDKG’s transcript?

• ChillDKG includes n-encshares
• Does the transcript contain n^2, ephemeral encryption nonces?
  • Each participant includes their n-ephemeral enc nonces, in EncPedPop right?
    • But won’t this make the “transcript” different for each participant? Hence, the equality protocol will fail?
  • If there are n^2 ephemeral encryption nonces, how will the backup be O(n) then?

Almost done with my review of ChillDKG (currently going through the Python code). I only have a few minor suggestions, which I'll open an issue for. After that, I'll move on to rebasing the Schnorr adaptor PR.