{
  "draft": "draft-irtf-cfrg-frost-15",
  "doc_id": "RFC9591",
  "title": "The Flexible Round-Optimized Schnorr Threshold (FROST) Protocol for Two-Round Schnorr Signatures",
  "authors": [
    "D. Connolly",
    "C. Komlo",
    "I. Goldberg",
    "C. A. Wood"
  ],
  "format": [
    "XML",
    "TEXT",
    "HTML",
    "PDF"
  ],
  "page_count": "47",
  "pub_status": "INFORMATIONAL",
  "status": "INFORMATIONAL",
  "source": "Crypto Forum",
  "abstract": "This document specifies the Flexible Round-Optimized Schnorr Threshold (FROST) signing protocol.  FROST signatures can be issued after a threshold number of entities cooperate to compute a signature, allowing for improved distribution of trust and redundancy with respect to a secret key.  FROST depends only on a prime-order group and cryptographic hash function.  This document specifies a number of ciphersuites to instantiate FROST using different prime-order groups and hash functions.  This document is a product of the Crypto Forum Research Group (CFRG) in the IRTF.",
  "pub_date": "June 2024",
  "keywords": [
    "Threshold signature",
    "threshold cryptography",
    "secret sharing",
    "EdDSA signature",
    "Schnorr signature"
  ],
  "obsoletes": [],
  "obsoleted_by": [],
  "updates": [],
  "updated_by": [],
  "see_also": [],
  "doi": "10.17487/RFC9591",
  "errata_url": null
}