Nice, that's very elegant, great find. Some time back we used Pallier threshold encryption to basically do Frost for encryption (this was for an online contest use case). That worked in terms of not exposing the encryption key to any single party (keep it cold like Forst) but then we needed a separate Pallier keypair and as far as I remember it could only handle chunks of 100 words or so, depending on the length of the key and byte limit that unlocks, so required stitching up longer texts (or jacking up the key length to get more bytes). I guess that's just a mathematical limit in context of threshold encryption without exposing the full key to any one party. But not keeping the full encryption key cold here doesn't seem like a dealbreaker to me, and the whole thing is really neat and tidy all bundled in to FROST. You guys are taking some seriously big whacks at this problem. 👍