We built a FROST (RFC-9591) threshold Schnorr signature implementation as an extension module for libsecp256k1.

The goal wasn’t to make another framework but to see what it looks like when FROST is engineered inside a minimal, production-grade C crypto library.

Highlights: - fork of bitcoin-core/secp256k1 - portable C89 - no external crypto dependencies - RFC test vector compatibility - upstream merges maintained

Mostly useful for embedded or performance-sensitive systems where adding a full crypto stack isn’t ideal.

Code: https://github.com/bancaditalia/secp256k1-frost

Happy to answer questions or hear critiques.