upcarta
  • Sign In
  • Sign Up
  • Explore
  • Search

FROST: Flexible Round-Optimized Schnorr Threshold Signatures

  • Paper
  • Jul 12, 2020
  • #Cryptography
Chelsea Komlo
@chelseakomlo
(Author)
Ian Avrum Goldberg
@IanAvrumGoldberg
(Author)
eprint.iacr.org
Read on eprint.iacr.org
1 Recommender
1 Mention
Unlike signatures in a single-party setting, threshold signatures require cooperation among a threshold number of signers each holding a share of a common private key. Consequently,... Show More

Unlike signatures in a single-party setting, threshold signatures require cooperation among a threshold number of signers each holding a share of a common private key. Consequently, generating signatures in a threshold setting imposes overhead due to network rounds among signers, proving costly when secret shares are stored on network-limited devices or when coordination occurs over unreliable networks. In this work, we present FROST, a Flexible Round-Optimized Schnorr Threshold signature scheme that reduces network overhead during signing operations while employing a novel technique to protect against forgery attacks applicable to similar schemes in the literature. FROST improves upon the state of the art in Schnorr threshold signature protocols, as it can be safely used without limiting concurrency of signing operations yet allows for true threshold signing, as only a threshold number of participants are required for signing operations. FROST can be used as either a two-round protocol where signers send and receive two messages in total, or optimized to a single-round signing protocol with a pre-processing stage. FROST achieves its efficiency improvements in part by allowing the protocol to abort in the presence of a misbehaving participant (who is then identified and excluded from future operations)---a reasonable model for practical deployment scenarios. We present proofs of security demonstrating that FROST is secure against chosen-message attacks assuming the discrete logarithm problem is hard and the adversary controls fewer participants than the threshold.

Show Less
Recommend
Post
Save
Complete
Collect
Mentions
See All
Rijndael @rot13maxi · Mar 23, 2023
  • Post
  • From Twitter
I wouldn't use it in production, but for understanding/playing with FROST, @jesseposner also has a python implementation here: [link] The original FROST paper is an EXCELLENT read:
  • upcarta ©2025
  • Home
  • About
  • Terms
  • Privacy
  • Cookies
  • @upcarta