Notes

• Existing DKG protocols are incompatible with specific key structures and lack adaptive security.
• First protocol achieves optimal round complexity (one broadcast round) with adversarial bias.
• Second protocol eliminates bias in two rounds.
• Supports proactive key refresh for recovery from transient compromises.
• Evaluation shows practical efficiency for modern architectures.
• UC-based security without non-falsifiable assumptions.

• 现有DKG协议与特定密钥结构不兼容，无法满足自适应安全性要求。
• 首个方案通过一轮广播实现最优轮数，但允许敌手偏置。
• 第二个方案在两轮内消除偏置，提供完全无偏的密钥生成。
• 协议支持主动密钥刷新，允许长期网络恢复节点临时沦陷。
• 评估表明，通信与计算开销在现代化架构中可接受。
• 该工作基于UC框架，避免了非标准假设。