FROST: Flexible Round-Optimized Schnorr Threshold Signatures and Extensibility to EdDSA

Abstract: FROST is an improved threshold Schnorr signature scheme that allows for an optimization from a two-round signing protocol into a single-round protocol with preprocessing. FROST improves upon prior constructions as it is secure against forgery attacks which are demonstrated to be viable against similar schemes in the literature. Excitingly, there is already interest and plans for the use of FROST for practical use.In this talk, we will introduce FROST and the motivations for its design. We will review the security model under which FROST is secure, and how this security model compares to practical deployments of threshold signatures. We will discuss how FROST is compatible with existing protocols such as those that require EdDSA compatibility, as well as next steps for FROST to be deployed and standardized.