We built a FROST (RFC-9591) threshold Schnorr signature implementation as an extension module for libsecp256k1.
The goal wasn’t to make another framework but to see what it looks like when FROST is engineered inside a minimal, production-grade C crypto library.
Highlights: - fork of bitcoin-core/secp256k1 - portable C89 - no external crypto dependencies - RFC test vector compatibility - upstream merges maintained
Mostly useful for embedded or performance-sensitive systems where adding a full crypto stack isn’t ideal.
Code: https://github.com/bancaditalia/secp256k1-frost
Happy to answer questions or hear critiques.