Suggetion for improvement on explaining Frost signing process #2
Description
Hello!
First of all, thank you for putting out such great learning materials--I have much enjoyed going thru the Frost on the command line piece.
With that said, I've spent the past few months trying to understand the Frost protocol, and I'd like to offer some improvements for explaining the nonces.
In 1.2, you state that there are 2 nonces in the pre-processing stage. This is something that I struggled to understand in the literature for a long time and finally started to make some progress on in recent weeks which is why I'd like to suggest the following.
The "2 nonces" in the preprocessing stage I don't believe are nonces--they are "nonce material" or a "nonce material pair" which are used to stage a commitment. This helps understanding because otherwise it seems like the protocol is using 3 nonces, where in fact there is only one nonce-- the signing nonce. This nonce material pair is used to establish the commitment so that the signing nonce can occur.
It may help to distinguish things this way, but feel free to correct me if you think I'm off base.
Many thanks!
4bit