Questions tagged [frost]
FROST is a Schnorr threshold signature scheme that uses key and signature aggregation. It allows arbitrary k-of-n thresholds (unlike schemes like MuSig2 which are n-of-n) but requires an interactive setup.
9
questions
0
votes
1
answer
115
views
To what extent does BIP32 key derivation impact the design of secure key aggregation multisig and threshold schemes like MuSig and FROST?
I have seen it discussed in various places (e.g. 1, 2) that using BIP32 key derivation impacts the design of secure key aggregation multisig and threshold schemes like MuSig(2) and FROST.
What are the ...
- 14.5k
1
vote
0
answers
27
views
What is the argument for not using proofs of possession in Bitcoin multisig and threshold key aggregation schemes?
A number of multisig and threshold sig key aggregation schemes developed outside of the Bitcoin ecosystem (e.g. SpeedyMuSig, FROST) use proofs of possession yet those developed in the Bitcoin ...
- 14.5k
1
vote
1
answer
563
views
How do MuSig2 and FROST compare for multisig key aggregation schemes?
Although FROST is primarily for threshold (k-of-n, k<n) key aggregation schemes (and MuSig2 doesn't support threshold) FROST can support multisig (n-of-n) key aggregation. So what are the upsides ...
- 14.5k
3
votes
1
answer
63
views
How do the various Lightning implementations treat latency? How long do they wait for a peer to provide a signature before using unhappy path?
Rene Pickhardt brought up the problem of latency on the Lightning Network in this answer on using nested (or "recursive") MuSig2 or FROST when providing a signature within an existing ...
- 14.5k
2
votes
2
answers
197
views
Can you do P2WSH / P2SH on Lightning Network (LN)?
I understand that a channel is a 2 of 2 multisig:
1 && 1
Is it possible that one side of this channel is a multisig wallet?
So in essence one of the 2 main, is actually a 2 of 3 multisig. ...
- 82
1
vote
1
answer
102
views
Is weighed multi-sig wallet possible?
In a multi-sig wallet, each of the public keys is unique. Is it possible to create weighted multi-sig wallet, such that one private key has more power than the others?
Case 1: typical Example (need 2 ...
- 82
2
votes
0
answers
224
views
"Non-mandatory-script-verify-flag (Invalid Schnorr Signature)" on testnet
I'm using the FROST algorithm to create a threshold signature for some taproot output (using this code).
When I tried using it on the testnet, it works most of the time but from time to time I would ...
- 75
2
votes
1
answer
184
views
How to spend a taproot output using key path with a threshold signature scheme when the secret key is never computed?
In taproot, in order to spend the keypath, the transaction must be signed using the tweaked private key instead of the normal private key (as defined in BIP 341).
However when computing a signature ...
- 75
1
vote
2
answers
89
views
Is it possible to create pure lightning lockboxes (without touching the blockchain)?
I'm considering a scenario in lightning, where it would be extremely useful to be able to lock the funds in 2/3 lock
Is this possible on lightning network (even in theory)?
- 211