发表机构
EternaX Labs（EternaX实验室）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
本文针对后量子分布式授权的签名迁移问题，梳理出三个设计属性，分类多种签名方案，发现无方案同时满足三个属性，阐明仅可替换API无法实现分布式授权的密码敏捷性。
AI 中文摘要
当授权在多方间分布式进行时，后量子签名迁移会引发独特的系统问题。在原生阈值签名中，签名算法可决定密钥生成、份额状态、预处理、交互、组合、刷新及恢复。将阈值策略在原生签名关系之外评估的架构可降低这种耦合，但除非可信的完整密钥签名者将批准转换为原生签名，否则其授权证据无法被未修改的原生验证者接受。本文通过三个属性梳理该设计边界：原生签名兼容性、单侧签名抗性及阈值层敏捷性。我们对专用阈值签名、通用MPC签名、分布式基于哈希的构造、可编程多重签名及双门授权、阈值授权HSM签名进行分类。迁移影响曲面可识别哪些组件随签名算法变化。在所调查的各类方案中，没有设计同时提供原生输出、单侧签名抗性和阈值层敏捷性。这是一种架构张力，而非不可能主张，它阐明了为何仅可替换的API无法使分布式授权具备密码敏捷性。
英文摘要
Post-quantum signature migration poses a distinct systems problem when authorization is distributed among multiple parties. In native threshold signing, the signature algorithm may determine key generation, share state, preprocessing, interaction, combination, refresh, and recovery. Architectures that evaluate threshold policy outside the native signing relation can reduce this coupling, but their authorization evidence is not accepted by an unchanged native verifier unless a trusted complete-key signer translates approval into a native signature. This paper organizes that design boundary through three properties: native-signature compatibility, unilateral-signing resistance, and threshold-layer agility. We classify specialized threshold signatures, generic MPC signing, distributed hash-based constructions, programmable multisignature and dual-gate authorization, and threshold-authorized HSM signing. A migration impact surface identifies which components change with the signature algorithm. Across the surveyed families, no design simultaneously provides native output, unilateral-signing resistance, and threshold-layer agility. This is an architectural tension, not an impossibility claim, and it clarifies why a replaceable API alone does not make distributed authorization cryptographically agile.
Comments16 pages
