diff --git a/draft-bradleylundberg-cfrg-arkg.html b/draft-bradleylundberg-cfrg-arkg.html index c403584..3e22c22 100644 --- a/draft-bradleylundberg-cfrg-arkg.html +++ b/draft-bradleylundberg-cfrg-arkg.html @@ -1165,6 +1165,11 @@
2.2. The function ARKG-Generate-Seed
+2.3. The function ARKG-Derive-Public-Key
@@ -1577,6 +1582,25 @@Although the above definition expresses the key generation as opaque,
+likely sampling uniformly random key distributions,
+implementations MAY choose to implement the functions BL-Generate-Keypair()
,
+KEM-Generate-Keypair()
and ARKG-Generate-Seed()
+as deterministic functions of some out-of-band input.
+This can be thought of as defining a single-use ARKG instance where these function outputs are static.
+This use case is beyond the scope of this document
+since the implementation of ARKG-Generate-Seed
is internal to the delegating party,
+even if applications choose to distribute the delegating party across multiple processing entities.¶
For example, one entity may randomly sample pk_bl
, derive pk_kem
deterministically from pk_bl
+and submit only pk_bl
to a separate service that uses the same procedure to also derive the same pk_kem
.
+This document considers both of these entities as parts of the same logical delegating party.¶