Paper 2025/1789 Original: eprint.iacr.org/2025/1789 ↗

Olingo: Threshold Lattice Signatures with DKG and Identifiable Abort

Kamil Doruk Gur
Patrick Hough
Jonathan Katz
Caroline Sandsbråten
Tjerand Silde
Abstract

We present Olingo, a framework for threshold lattice signatures that is the first to offer all desired properties for real-world implementations of quantum-secure threshold signatures: small keys and signatures, low communication and round complexity, non-interactive online signing, distributed key generation (DKG), and identifiable abort. Our starting point is the framework by Gur, Katz, and Silde (PQCrypto 2024). We change the underlying signature scheme to Raccoon (Katsumata et al, Crypto 2024), remove the trapdoor commitments, extend the scheme from two to three rounds, and then apply numerous improvements and optimizations to achieve all the above properties. We provide detailed proofs of security for our new framework and present concrete parameters and benchmarks. At the $128$-bit security level, for up to $1024$ parties and supporting $2^{60}$ signatures, our scheme has $4.4$ KB public keys and $11.3$ KB signatures; while signing requires communication of $852$ KB per party using the LaBRADOR proof system (Beullens and Seiler, Crypto 2023). An optimistic non-interactive version of our scheme requires only $76$ KB communication per party.

Metadata
Available format(s)
PDF
Category
Cryptographic protocols
Publication info
Preprint.
History
2026-08-28: last updated
2025-09-30: published
Short URL
https://ia.cr/2025/1789
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2025/1789,
      author = {Kamil Doruk Gur and Patrick Hough and Jonathan Katz and Caroline Sandsbråten and Tjerand Silde},
      title = {Olingo: Threshold Lattice Signatures with DKG and Identifiable Abort},
      howpublished = {Cryptology {ePrint} Archive, Paper 2025/1789},
      year = {2025},
      url = {https://eprint.iacr.org/2025/1789}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.