The Application of Ed25519 in MPC: Providing a More Secure Signature Scheme for DApps and Wallets

In recent years, Ed25519 has become a widely popular cryptographic algorithm in the Web3 ecosystem. Although popular blockchain projects such as Solana, Near, and Aptos have adopted this efficient and secure algorithm, the application of true multi-party computation (MPC) solutions on these platforms remains limited.

This means that while cryptographic technology continues to advance, wallets based on Ed25519 typically lack multi-party security mechanisms to eliminate the risks associated with a single private key. Without the support of MPC technology, these wallets will continue to face the same core security vulnerabilities as traditional wallets, leaving significant room for improvement in protecting digital assets.

Recently, a project in the Solana ecosystem launched a mobile-friendly trading suite. This suite combines powerful trading features with social login and token creation experiences, providing users with a convenient mobile trading solution.

The Current State of Ed25519 Wallets

It is very important to understand the weaknesses of the current Ed25519 Wallet system. Typically, Wallets use mnemonic phrases to generate private keys, which are then used to sign transactions. However, traditional Wallets are more susceptible to attacks such as social engineering, phishing websites, and malware. Since the private key is the only way to access the Wallet, it can be difficult to recover or protect assets once an issue arises.

This is precisely where MPC technology can fundamentally change security. Unlike traditional Wallets, MPC Wallets do not store private keys in a single location. Instead, the keys are divided into multiple parts and distributed across different locations. When a transaction needs to be signed, these key parts generate partial signatures, which are then combined using the threshold signature scheme (TSS) to produce the final signature.

Since the private key is never fully exposed on the front end, MPC Wallet can provide stronger protection, effectively guarding against social engineering, malware, and injection attacks, elevating the security of the wallet to a whole new level.

Ed25519 Curve and EdDSA

Ed25519 is a twisted Edwards form of Curve25519, optimized for double-base scalar multiplication. It is more popular compared to other elliptic curves because it has shorter key and signature lengths, and faster, more efficient signature computation and verification, while still maintaining a high level of security. Ed25519 uses a 32-byte seed and a 32-byte public key, with a generated signature size of 64 bytes.

In Ed25519, the seed is hashed using the SHA-512 algorithm, from which the first 32 bytes are extracted to create a private scalar. This scalar is then multiplied by the fixed elliptic point G on the Ed25519 curve to generate the public key.

This relationship can be represented as: Public Key = G x k

where k represents the private scalar, and G is the base point of the Ed25519 curve.

How to Support Ed25519 in MPC

Some MPC solutions adopt different approaches to support Ed25519. They directly generate private scalars and then use these scalars to compute the corresponding public key, and use the FROST algorithm to generate threshold signatures.

The FROST algorithm allows private keys to be shared for independently signing transactions and generating final signatures. Each participant in the signing process generates a random number and makes a commitment to it, which is then shared among all participants. After sharing the commitments, participants can independently sign the transaction and generate the final TSS signature.

This method uses the FROST algorithm to generate valid threshold signatures while minimizing the required communication compared to traditional multi-round schemes. It also supports flexible thresholds and allows non-interactive signing among participants. After the commitment phase is completed, participants can independently generate signatures without further interaction. In terms of security level, it can prevent forgery attacks without limiting the concurrency of signing operations and can abort the process in case of participant misconduct.

Using Ed25519 Curve in DApp and Wallet

The MPC solution supporting Ed25519 is a significant advancement for developers building DApps and Wallets using the Ed25519 curve. This creates new opportunities for building DApps and Wallets with MPC capabilities on popular chains such as Solana, Algorand, Near, and Polkadot. Developers can refer to the relevant documentation to learn how to integrate the MPC solution supporting the Ed25519 curve.

Some non-MPC SDKs based on Shamir secret sharing can also directly use Ed25519 private keys in various Web3 solutions, including mobile, gaming, and web SDKs. Developers can explore how to integrate these solutions with blockchain platforms such as Solana, Near, and Aptos.

Conclusion

In summary, MPC solutions that support EdDSA signatures provide enhanced security for DApps and Wallets. By leveraging true MPC technology, it eliminates the need to expose private keys on the front end, significantly reducing the risk of attacks. In addition to robust security, it offers seamless, user-friendly login and more efficient account recovery options.

As these technologies continue to develop, we can expect to see more innovative Web3 applications and Wallet solutions that provide users with a safer and more convenient digital asset management experience.