Demonstrates efficient threshold signing in distributed systems, indicating robust implementation for joint signature generation.
Flexible Round-Optimized Schnorr Threshold Signatures (FROST), standardized in IETF RFC 9591, allow a group of participants to jointly produce a compact Schnorr signature from distributed key shares. This paper presents secp256k1-frost , an ANSI C89 extension module for secp256k1 implementing RFC 9591 FROST over the secp256k1 curve with minimal dependencies. The library provides dealer-based and distributed key generation, nonce and commitment handling, signature-share generation, aggregation with share validation, and final signature verification. It also supports a BIP-340-compatible mode for secp256k1-oriented workflows. The implementation reuses the scalar, group, hash, and Schnorr-related primitives of secp256k1 and preserves the parent library’s build and testing model. The implementation is validated through RFC 9591 and RFC 9380 test vectors, functional tests, continuous integration, and memory-diagnostic checks. We also report microbenchmarks across multiple threshold configurations. The implementation is open source and publicly available at https://github.com/bancaditalia/secp256k1-frost .
No takes yet. Share an insight, caveat, or question.
Nardelli et al. (2026) studied this question.
Synapse has enriched 5 closely related papers on similar clinical questions. Consider them for comparative context: