Zcash Foundation

Demo for FROST for Zcash Library

The Zcash Foundation engineering team has been working on an implementation library for FROST (Flexible Round-Optimized Schnorr Threshold Signatures) for Zcash. To support this we have built demos, which are NOT to be used in a production environment nor with any secrets. The purpose of these demos are to: THREE DEMOS We have three demos […]

Pedersen DKG Denial of Service Vulnerability in FROST Distributed Key Generation Successfully Remediated

On January 3, 2024, Trail of Bits reached out to us to raise a denial-of-service vulnerability that affects different implementations of distributed key generation (DKG) protocols. Our FROST implementation was among those impacted. This denial-of-service vulnerability introduced the possibility of an attack being carried out as follows: During the DKG run, a malicious participant can generate […]

FROST Reference Implementation v1.0.0 Stable Release

Announcing FROST Reference Implementation V1.0.0

The Zcash Foundation is excited to announce the first stable release of frost-core, a reference implementation of Two-Round Threshold Schnorr Signatures with FROST, written in Rust. This implementation has been fully audited and conforms to the latest and final version of the IRTF draft specification, which we are confident will soon make it as a […]

Speeding up FROST with multi-scalar multiplication

by Deirdre Connolly, Conrado Gouvea We optimized our implementation of FROST by upwards of 50% over the trivial implementation, without changing the protocol and therefore maintaining its existing security guarantees. We use a known trick to do so: multi-scalar multiplication, which is exactly designed to give this kind of performance speedup. In the FROST threshold […]

FROST Performance

In this post, we briefly describe the threshold signature scheme FROST, and present benchmark results for our FROST implementation. We also describe one optimization that greatly improves its speed, especially for scenarios with a large number of signers.