FROST Research Updates
summary
FROST is a two-round concurrent-secure Schnorr threshold scheme with a pedpop DKG that cuts signing exponentiations in the optimized variant (FROST II) from t to 1, has at least five public implementations, and is deployed at firms including Coinbase. Independent and improved security proofs exist; FROST II trades a small malleability of the signing set (attack can remap which honest shares actually contribute) for performance. Work continues on robustness wrappers (ROAST) and an unlinkable FROST variant for Zcash.
AI-written summary · about
chapters (15)
- 0:00Intro
- 0:27What is FROST?
- 1:51What are Threshold Signatures?
- 2:49Uses for Threshold Signatures
- 3:26Where was FROST Last Year?
- 4:05Where is FROST Now?
- 6:30(Single-Party) Schnorr Signature Scheme
- 10:19ROS Attack
- 11:455 Rounds
- 13:07Fix #2: 2 Nonces ("FROST")
- 14:102 Nonces ("FROST2")
- 16:27Proving the Security of Multi-Party Schnorr
- 22:53Signing Set Malleability
- 23:25FROST & Robustness
- 28:58What do you need?
