This report considers threshold signature schemes interchangeable with respect to the verifi-
68 cation mechanism of the Edwards-Curve Digital Signature Algorithm (EdDSA).
Historically, 69 EdDSA is known as a variant of Schnorr signatures, which are well-studied
and suitable for 70 efficient thresholdization, ie, for being computed when the private signing
key is secret-sha-71 red across multiple parties. In the threshold setting, signatures remain
unforgeable even if up 72 to some threshold number of the cosigners become compromised …