new paper: eprint.iacr.org/2022/550

"By applying ROAST to Σ = FROST, we obtain the first (non-trivial) asynchronous Schnorr threshold signature protocol"

"From an engineering point of view, ROAST is a simple wrapper around Σ, making it easy to implement as an independent layer that only calls Σ in a black-box manner."

it's an optimization of network communication for large groups of signers.

"Assuming that Σ is unforgeable under concurrent sessions and provides identifiable aborts, the application of ROAST to Σ yields a robust and asynchronous signing protocol" this prerequisite isn't achieved yet in monero

as soon prerequisite is achieved I'm sure it would not be so hard to optimize network communication and add some useful checks to detect malicious participants

<UkoeHB> "new paper: eprint.iacr...." <- thanks for sharing

Sounds interesting