<onyx_prot:matrix.org> Built a non-custodial 2-of-3 multisig escrow for XMR — FROST threshold sigs +

<onyx_prot:matrix.org> CLSAG, runs in WASM (browser). Live on mainnet.

<onyx_prot:matrix.org> looking at FCMP++ adaptation. The FROST DKG should carry over since it's

<onyx_prot:matrix.org> Schnorr-based, but the signing part will need rework for the new membership

<onyx_prot:matrix.org> proofs.[... more lines follow, see mrelay.p2pool.observer/e/4Pnau-IKMEFxR2cz ]

<kayabanerve:matrix.org> The cryptography itself is already written in the FCMP++ libraries.

<onyx_prot:matrix.org> Good to know. Is there a multisig signing spec/API I should look at?

<onyx_prot:matrix.org> My implementation uses a coordination server that facilitates signing rounds

<onyx_prot:matrix.org> without holding private keys (derives commitments from public data only).

<onyx_prot:matrix.org> Wondering if that pattern maps to the new libs or if the approach is different.

<plowsof:matrix.org> is it open source?

<syntheticbird> I believe this is used privately

then we will wait for spirobel and milestone 3 ccs.getmonero.org/proposals/spirobel_monero_browser_wallet.html

<onyx_prot:matrix.org> Not currently. It's a commercial product

<onyx_prot:matrix.org> But I'm open to discussing the cryptographic approach or contributing

<onyx_prot:matrix.org> to Carrot multisig research separately.

<onyx_prot:matrix.org> Aware of spirobel's work. Different scope — my focus is escrow infrastructure [... more lines follow, see mrelay.p2pool.observer/e/kNSovOIKT2NWQWxp ]

<kayabanerve:matrix.org> @onyx_prot:matrix.org: Not to be unappreciative, just to let you know what the landscape is:Monero already has a FROST-inspired signing protocol for CLSAGs, with security proofs, and an audited FOSS implementation.The bones of the implementation are slated for use within FCMP++ which already has the cryptographic protocol defined, and is already slated for review as part of the FCMP++ R&D effort.

<kayabanerve:matrix.org> That doesn't comment on how wallets represent these bones but this is already an area of research with a long history.

<onyx_prot:matrix.org> Makes sense. My interest is specifically the wallet/coordination layer —

<onyx_prot:matrix.org> how to facilitate 2-of-3 signing rounds for escrow without custodying keys.

<onyx_prot:matrix.org> I'll follow the FCMP++ R&D and look at the existing FROST implementation.

<onyx_prot:matrix.org> Thanks for the context.