On the need for threshold post-quantum (signature) schemes

Abstract: There are currently two standardization efforts running in parallel at NIST: Threshold Schemes for Cryptographic Primitives, and Post-Quantum Cryptography. Unfortunately, they do not overlap, and this is a problem, since easy thresholdizability is not a property that would magically appear for majority of the cryptographic schemes. In particular, the current post-quantum standard candidates can be thresholdized only with major performance penalty. The message of this brief is that there will be need for efficient threshold post-quantum cryptography as well, and there has to be an explicit call for obtaining such schemes.