FROST Demo Audit: frost-client and frostd
During Q1 2025, Least Authority (in their role as the Zcash Ecosystem Security Lead) undertook an audit of the FROST Demo code, including the frost-client command line tool and frostd server components. We expect that the FROST server, frostd, will be used by wallets to help participants and coordinators communicate with each other and that […]
The Zcash Foundation’s Q4 2024 Report
The Zcash Foundation is committed to transparency and openness with the Zcash community and our other stakeholders. Today, we are releasing our Q4 2024 report, which provides an overview of the work undertaken by the Zcash Foundation’s engineering team, as well as an overview of other activities during this period. As with our previous quarterly […]
FROST 2.1.0 Release
The Zcash Foundation is pleased to announce the release of FROST v2.1.0. This release includes a number of important changes and improvements to the FROST reference implementation. This release includes the frost-secp256k1-tr crate, which allows the generation of Bitcoin Taproot (BIP340/BIP341) compatible signatures and will be useful for ZSAs also, since BIP340 signatures will be […]
FROST 2.0.0 Release
The Zcash Foundation is pleased to announce the release of FROST v2.0.0. This release includes a number of important changes and improvements to the FROST reference implementation. The release introduces some breaking changes, motivated either by the goal of simplifying the API or to address issues. In particular, we changed the deserialization of elliptic curve […]
Demo for FROST for Zcash Library
The Zcash Foundation engineering team has been working on an implementation library for FROST (Flexible Round-Optimized Schnorr Threshold Signatures) for Zcash. To support this we have built demos, which are NOT to be used in a production environment nor with any secrets. The purpose of these demos are to: THREE DEMOS We have three demos […]
Pedersen DKG Denial of Service Vulnerability in FROST Distributed Key Generation Successfully Remediated
On January 3, 2024, Trail of Bits reached out to us to raise a denial-of-service vulnerability that affects different implementations of distributed key generation (DKG) protocols. Our FROST implementation was among those impacted. This denial-of-service vulnerability introduced the possibility of an attack being carried out as follows: During the DKG run, a malicious participant can generate […]
FROST Reference Implementation v1.0.0 Stable Release
The Zcash Foundation is excited to announce the first stable release of frost-core, a reference implementation of Two-Round Threshold Schnorr Signatures with FROST, written in Rust. This implementation has been fully audited and conforms to the latest and final version of the IRTF draft specification, which we are confident will soon make it as a […]
Speeding up FROST with multi-scalar multiplication
by Deirdre Connolly, Conrado Gouvea We optimized our implementation of FROST by upwards of 50% over the trivial implementation, without changing the protocol and therefore maintaining its existing security guarantees. We use a known trick to do so: multi-scalar multiplication, which is exactly designed to give this kind of performance speedup. In the FROST threshold […]
FROST Performance
In this post, we briefly describe the threshold signature scheme FROST, and present benchmark results for our FROST implementation. We also describe one optimization that greatly improves its speed, especially for scenarios with a large number of signers.
The Zcash Foundation has Finished an Audit of FROST
The Zcash Foundation is pleased to announce our completion of an audit for our FROST implementation. This implementation is a first step and does not yet include support for re-randomization nor the DKG, but these will be features that we will add next (and will complete separate audits for each). For this audit, we worked with […]