500 sats \ 1 reply \ @shibe 21 Jul 2023 \ on: Frostsnap - Easy, personalized, secure bitcoin multisig for everyone bitcoin
Does FROST require additional rounds of communication for signing similar to MuSig/MuSig2, or can a transaction just simply be passed along to signers until the threshold is reached?
FROST requires each signing party to share a nonce, and the signing parties sign under the same agreed upon set of nonces.
You can share a whole bunch of these nonces upfront, storing them on the coordinator wallet ready for use. This way, signing can still be done in a single round.
A difference with FROST however is that you need to select the subset of signers
(signer_2, signer_3, signer_5)
that will be signing, from the beginning of the signing session. If this was a big deal then you could use tricks like combinations of concurrent signing sessions.reply