FROST — t-of-n Threshold Schnorr FROST is the standard t-of-n threshold Schnorr signature scheme suitable for Bitcoin. Like MuSig2, it produces a single 64-byte BIP340 signature under one aggregated pubkey. Unlike MuSig2 (which requires all n parties to sign), FROST allows any t ≤ n parties to sign. Key properties - t-of-n — any t parties can sign, fewer cannot. - Single-sig appearance — output looks like a regular Schnorr sig on a regular x-only pubkey. - Two rounds in the FROST signing protocol (after one-time DKG). - No on-chain multisig — saves bytes and improves privacy. Two phases Phase…