<oembed><type>rich</type><version>1.0</version><title>conduition wrote</title><author_name>conduition (npub1l6…6zvtg)</author_name><author_url>https://yabu.me/npub1l6uy9chxyn943cmylrmukd3uqdq8h623nt2gxfh4rruhdv64zpvsx6zvtg</author_url><provider_name>njump</provider_name><provider_url>https://yabu.me</provider_url><html>Actually bringing your own key is possible, but there are limitations.&#xA;&#xA;A FROST signing share is a polynomial evaluation. If, say, 3 people join together each bringing their own fixed signing shares, there exists some quadratic polynomial that interpolates their shares. However, it&#39;s impossible to find a linear (degree-one) polynomial which does the same. &#xA;&#xA;In practice, this means if `n` people BYOK, they can definitely create an `n` of `n` threshold key with FROST. They can then issue new shares to add more people to the FROST group if they wanted, to make it an `n` of `m` threshold.&#xA;&#xA;I&#39;m not sure about the security implications of what a DKG would look like if only SOME keys are fixed and others can be variable. That&#39;s a different ball game 😅</html></oembed>