JugglingSwap：无脚本原子跨链交换
JugglingSwap: Scriptless Atomic Cross-Chain Swaps
摘要：
区块链空间在不断变化。新的链正在频繁地实现，并考虑到不同的用例。随着越来越多类型的加密资产获得现实世界的价值，对区块链互操作性的需求越来越大。今天的交易所服务仍然由需要保管资金的中央机构主导。这种信任带来了成本和安全风险，频繁的违规行为就是明证。原子跨链交换（ACCS）允许相互不信任的各方以点对点的方式安全地交换加密资产，同时保持自我保管。基本的ACCS协议利用区块链的脚本功能来限制交易方之间的资金转移。最近的工作表明，这样的协议可以实现在一个无脚本的设置。这对区块链的吞吐量、交换协议的效率以及可互换性和隐私性都有很多好处。所提出的协议仅限于通过Schnorr签名或ECDSA（假设相同的椭圆曲线参数）可转移的资产。在这项工作中，我们提出了JugglingSwap，一个无脚本的原子跨链交换协议，具有更高的互操作性。我们弱化了可以包含在ACCS协议中的关于区块链的假设，仅要求（1）底层数字签名方案存在阈值变体，（2）它基于椭圆曲线离散对数问题（ECDLP）。公平交换是通过逐步释放秘密来实现的。为了实现这一点，我们使用了一个新的积木，我们称之为杂耍：一个公钥可验证的加密方案，以转移各方之间的秘密份额，这也可以是单独的利益。杂耍，然后定制一个特定的私钥管理系统的设计与阈值签名安全。
英文摘要：
The blockchain space is changing constantly. New chains are being implemented frequently with different use cases in mind. As more and more types of crypto assets are getting real world value there is an increasing need for blockchain interoperability. Exchange services today are still dominated by central parties which require custody of funds. This trust imposes costs and security risks as frequent breaches testify. Atomic cross-chain swaps (ACCS) allow mutual distrusting parties to securely exchange crypto assets in a peer-to-peer manner while preserving self-custody. Fundamental ACCS protocols leveraged the scripting capabilities of blockchains to conditionalize the transfer of funds between trading parties. Recent work showed that such protocols can be realized in a scriptless setting. This has many benefits to blockchains throughput, efficiency of swap protocols and also to fungibility and privacy. The proposed protocols are limited to assets transferable by either Schnorr signatures or ECDSA that are assuming the same elliptic curve parameters. In this work we present JugglingSwap, a scriptless atomic cross-chain swap protocol with a higher degree of interoperability. We weaken the assumptions about blockchains that can be included in the ACCS protocol, and only require that (1) a threshold variant exists to the underlying digital signature scheme and (2) it is based on the elliptic curve discrete logarithm problem (ECDLP). The fair exchange is achieved by a gradual release of secrets. To achieve this we use a new building block we call Juggling: a public key verifiable encryption scheme to transfer segments of secret shares between parties, which can also be of separate interest. Juggling is then tailored to a specific private key management system design with threshold signatures security.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
