Yes, you can perform nonce preprocessing with FROST as well, but the problem is that a disruptive signer can force a re-do of the entire signing session. This means you must repeatedly attempt the signing session until it succeeds, and therefore you need to run a server.
In contrast, with NOIST, a valid partial signature is guaranteed to produce a valid full signature when combined with others. A signer cannot force a re-do of the entire session.
brock /
npub18a…tmask
2024-09-16 11:23:13
in reply to nevent1q…8e4a
Author Public Key
npub18aq8s3z9xl87e74twfk93mljxq6alv4a79yheadx33t9np4g2wkqrtmaskPublished at
2024-09-16 11:23:13Event JSON
{
"id": "8c7eddcf029ef73990c0318dd54405b22fc63c6c76c4209d3e8ad99d4bbbe1c9",
"pubkey": "3f4078444537cfecfaab726c58eff23035dfb2bdf1497cf5a68c565986a853ac",
"created_at": 1726478593,
"kind": 1,
"tags": [
[
"e",
"8668b209be962b3a47c740e817483b0a86a840ac271d1669db28e5b5c48a2723",
"wss://relay.wellorder.net",
"root"
],
[
"p",
"675b84fe75e216ab947c7438ee519ca7775376ddf05dadfba6278bd012e1d728"
]
],
"content": "Yes, you can perform nonce preprocessing with FROST as well, but the problem is that a disruptive signer can force a re-do of the entire signing session. This means you must repeatedly attempt the signing session until it succeeds, and therefore you need to run a server.\n\nIn contrast, with NOIST, a valid partial signature is guaranteed to produce a valid full signature when combined with others. A signer cannot force a re-do of the entire session.",
"sig": "71a1a001ffacc0143da05c70f6a95f2fd30263427f4d19fff606aec0c489d1ae741f49706e175d079032e54b53b979c9724c86f4cc16c93ac1a23c0100babdd9"
}