ROAST: Robust Asynchronous Schnorr Threshold Signatures
summary
ROAST claims to turn FROST into a robust asynchronous Schnorr threshold signing protocol by wrapping FROST and starting at most n−t+1 FROST sessions so n−t malicious nodes can at most stall n−t sessions; formal proof shows one session completes. Prototype in Python uses fast ecdsa/GMP and benchmarks: 11-of-15 runs <1s, 67-of-100 runs ~0.7–7s depending on coordinated attack. Assumes a coordinator (can replicate n−t+1 coordinators to remove trust) and targets Bitcoin/Taproot (PIP 340) Schnorr compatibility.
AI-written summary · about
chapters (6)
- 0:00Context and motivation
- 3:17Threshold signature basics
- 9:35Introducing Frost
- 15:03Roast protocol mechanics
- 28:16Implementation and results
- 32:44Summary and Q&A
related talks
31mFROST Research Updates
32mHow to use FROST (incl. Demo)
32mBitcoin in a Taproot World
25mFROST Implementation Update
29mFROST Engineering Updates
23mFrostsnap: Self Custody Designed for Million Dollar Bitcoin
26mSecure protocols on BIP taproot
15mInside Iceberg: The (Secret) Leap Forward in Bitcoin's Cryptography