mpc

const (
	// DKG pair-setup rounds (Bob initiates, Alice responds)
	DklsDKGRound1 = "dkls_dkg_r1" // Bob → Alice  (Bob's random seed)
	DklsDKGRound2 = "dkls_dkg_r2" // Alice → Bob  (commitment + Alice's seed)
	DklsDKGRound3 = "dkls_dkg_r3" // Bob → Alice  (Bob's Schnorr proof)
	DklsDKGRound4 = "dkls_dkg_r4" // Alice → Bob  (Alice's revealed proof)
	DklsDKGRound5 = "dkls_dkg_r5" // Bob → Alice  (seed-OT round 1)
	DklsDKGRound6 = "dkls_dkg_r6" // Alice → Bob  (seed-OT round 2)
	DklsDKGRound7 = "dkls_dkg_r7" // Bob → Alice  (seed-OT round 3)
	DklsDKGRound8 = "dkls_dkg_r8" // Alice → Bob  (seed-OT round 4)
	DklsDKGRound9 = "dkls_dkg_r9" // Bob → Alice  (seed-OT round 5)

	// Signing rounds (Alice initiates)
	DklsSignRound1 = "dkls_sign_r1" // Alice → Bob  (Alice's random seed)
	DklsSignRound2 = "dkls_sign_r2" // Bob → Alice  (Bob's sign output)
	DklsSignRound3 = "dkls_sign_r3" // Alice → Bob  (Alice's sign message)

	// Refresh rounds (Alice initiates)
	DklsRefreshRound1 = "dkls_refresh_r1" // Alice → Bob  (Alice's addend k_A)
	DklsRefreshRound2 = "dkls_refresh_r2" // Bob → Alice  (Bob's addend + seed-OT r1)
	DklsRefreshRound3 = "dkls_refresh_r3" // Alice → Bob  (seed-OT r2)
	DklsRefreshRound4 = "dkls_refresh_r4" // Bob → Alice  (seed-OT r3)
	DklsRefreshRound5 = "dkls_refresh_r5" // Alice → Bob  (seed-OT r4)
	DklsRefreshRound6 = "dkls_refresh_r6" // Bob → Alice  (seed-OT r5)
)

const (
	// FROST DKG rounds
	FrostDKGRound1    = "frost_dkg_r1"     // all → all  (each participant's Round1 broadcast)
	FrostDKGRound1P2P = "frost_dkg_r1_p2p" // each → each (unicast Shamir share)
	FrostDKGRound2    = "frost_dkg_r2"     // all → all  (Round2 broadcast)

	// FROST signing rounds
	FrostSignRound1 = "frost_sign_r1" // all → all  (each signer's commitment)
	FrostSignRound2 = "frost_sign_r2" // all → all  (each signer's partial signature)

	// FROST resharing rounds
	FrostReshareRound1 = "frost_reshare_r1" // old → all  (old committee's round-1 outputs)
	FrostReshareRound2 = "frost_reshare_r2" // old → each  (refreshed Shamir shares)
	FrostReshareRound3 = "frost_reshare_r3" // new → all  (new committee acknowledgements)
)

const (
	ECDHExchangeTopic   = "ecdh:exchange"
	ECDHExchangeTimeout = 2 * time.Minute
)

const (
	PurposeKeygen  string = "keygen"
	PurposeSign    string = "sign"
	PurposeReshare string = "reshare"

	BackwardCompatibleVersion int = 0
	DefaultVersion            int = 1
)

const (
	TypeGenerateWalletResultFmt = "mpc.mpc_keygen_result.%s"
	TypeReshareWalletResultFmt  = "mpc.mpc_reshare_result.%s"
	TypeSigningResultFmt        = "mpc.mpc_signing_result.%s"

	SessionTypeECDSA SessionType = "session_ecdsa"
	SessionTypeEDDSA SessionType = "session_eddsa"

	// PeerReadyTimeout is the max time to wait for all peers to confirm
	// their subscriptions are active before starting the protocol.
	PeerReadyTimeout = 10 * time.Second
	// PeerReadyPollInterval is how often to retry the readiness check.
	PeerReadyPollInterval = 300 * time.Millisecond
)

const DklsDKGRoundCount = 9

const DklsRefreshRoundCount = 6

const DklsSignRoundCount = 3

const FrostDKGRoundCount = 2

const FrostReshareRoundCount = 3

const FrostSignRoundCount = 2

const (
	ReadinessCheckPeriod = 1 * time.Second
)