Dynamic-FROST: Schnorr threshold signatures with a flexible committee
Year: 2025
Type: article
Abstract: Threshold signatures enable any subgroup of predefined cardinality t t out of a committee of n n participants to generate a valid, aggregated signature. Although several ( t , n ) \left(t,n) -threshold signature schemes exist, most of them assume that the threshold t t and the set of participants do not change over time. Practical applications of threshold signatures might benefit from the possibility of updating the threshold or the committee of participants. Examples of such applications are consensus algorithms and blockchain wallets. In this article, we present Dynamic-FROST (D-FROST) that combines FROST, a Schnorr threshold signature scheme, with CHURP, a dynamic proactive secret sharing scheme. The resulting protocol is the first Schnorr threshold signature scheme that accommodates changes in both the committee and the threshold value without relying on a trusted third party. Besides detailing the protocol, we present a proof of its security: as the original signing scheme, D-FROST preserves the property of existential unforgeability under chosen-message attack.
Institutions: Roma Tre University, Bank of Italy, University of Pisa
Language: English
Subfield: Artificial Intelligence
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
Estimated APC paid: $1,187
Award: G507880695
OpenAlex ID: W4409415085