Finally sat down and read the FROST paper this morning. Really neat protocol. The key generation is basically shamirs secret sharing, but in reverse + commitments. And then signing is just adding partwise sigs because schnorr is all “linear” (that is its + and * group ops).