Questions tagged [frost]
A Schnorr threshold signature (k-of-n, k<n) scheme using key aggregation. There may be others but at the time of writing (September 2021) this seems the most promising.
7
questions
0
votes
1
answer
64
views
How do MuSig2 and FROST compare for multisig key aggregation schemes?
Although FROST is primarily for threshold (k-of-n, k<n) key aggregation schemes (and MuSig2 doesn't support threshold) FROST can support multisig (n-of-n) key aggregation. So what are the upsides ...
- 10.5k
3
votes
1
answer
54
views
How do the various Lightning implementations treat latency? How long do they wait for a peer to provide a signature before using unhappy path?
Rene Pickhardt brought up the problem of latency on the Lightning Network in this answer on using nested (or "recursive") MuSig2 or FROST when providing a signature within an existing ...
- 10.5k
2
votes
2
answers
97
views
Can you do P2WSH / P2SH on Lightning Network (LN)?
I understand that a channel is a 2 of 2 multisig:
1 && 1
Is it possible that one side of this channel is a multisig wallet?
So in essence one of the 2 main, is actually a 2 of 3 multisig. ...
- 72
1
vote
1
answer
57
views
Is weighed multi-sig wallet possible?
In a multi-sig wallet, each of the public keys is unique. Is it possible to create weighted multi-sig wallet, such that one private key has more power than the others?
Case 1: typical Example (need 2 ...
- 72
1
vote
0
answers
50
views
"Non-mandatory-script-verify-flag (Invalid Schnorr Signature)" on testnet
I'm using the FROST algorithm to create a threshold signature for some taproot output (using this code).
When I tried using it on the testnet, it works most of the time but from time to time I would ...
- 65
2
votes
1
answer
103
views
How to spend a taproot output using key path with a threshold signature scheme when the secret key is never computed?
In taproot, in order to spend the keypath, the transaction must be signed using the tweaked private key instead of the normal private key (as defined in BIP 341).
However when computing a signature ...
- 65
1
vote
2
answers
73
views
Is it possible to create pure lightning lockboxes (without touching the blockchain)?
I'm considering a scenario in lightning, where it would be extremely useful to be able to lock the funds in 2/3 lock
Is this possible on lightning network (even in theory)?
- 211