Questions tagged [frost]

A Schnorr threshold signature (k-of-n, k<n) scheme using key aggregation. There may be others but at the time of writing (September 2021) this seems the most promising.

Filter by
Sorted by
Tagged with
0 votes
1 answer
64 views

How do MuSig2 and FROST compare for multisig key aggregation schemes?

Although FROST is primarily for threshold (k-of-n, k<n) key aggregation schemes (and MuSig2 doesn't support threshold) FROST can support multisig (n-of-n) key aggregation. So what are the upsides ...
user avatar
3 votes
1 answer
54 views

How do the various Lightning implementations treat latency? How long do they wait for a peer to provide a signature before using unhappy path?

Rene Pickhardt brought up the problem of latency on the Lightning Network in this answer on using nested (or "recursive") MuSig2 or FROST when providing a signature within an existing ...
user avatar
2 votes
2 answers
97 views

Can you do P2WSH / P2SH on Lightning Network (LN)?

I understand that a channel is a 2 of 2 multisig: 1 && 1 Is it possible that one side of this channel is a multisig wallet? So in essence one of the 2 main, is actually a 2 of 3 multisig. ...
user avatar
1 vote
1 answer
57 views

Is weighed multi-sig wallet possible?

In a multi-sig wallet, each of the public keys is unique. Is it possible to create weighted multi-sig wallet, such that one private key has more power than the others? Case 1: typical Example (need 2 ...
user avatar
1 vote
0 answers
50 views

"Non-mandatory-script-verify-flag (Invalid Schnorr Signature)" on testnet

I'm using the FROST algorithm to create a threshold signature for some taproot output (using this code). When I tried using it on the testnet, it works most of the time but from time to time I would ...
user avatar
  • 65
2 votes
1 answer
103 views

How to spend a taproot output using key path with a threshold signature scheme when the secret key is never computed?

In taproot, in order to spend the keypath, the transaction must be signed using the tweaked private key instead of the normal private key (as defined in BIP 341). However when computing a signature ...
user avatar
  • 65
1 vote
2 answers
73 views

Is it possible to create pure lightning lockboxes (without touching the blockchain)?

I'm considering a scenario in lightning, where it would be extremely useful to be able to lock the funds in 2/3 lock Is this possible on lightning network (even in theory)?
user avatar