In case somebody who knows such things has free time on their hands: old.reddit.com/r/Monero/comments/14…ryptography_question_please_read_if

Just had an idea using 2/3 multisig which may achieve the same in a quite different, but much less complicated yet feasible way, see my comment there

kayabanerve[m]: can run the perf tests to see on your machine github.com/UkoeHB/monero/blob/fb306…sts/performance_tests/main.cpp#L587

rbrunner: multisig is not trustless which seems to be that guy's objective