working on it and no, it does not involve sending private keys to the MCU where they reside in plaintext like most “signers” do (coldcard, etc.) or putting it in easily extractable spi flash (lnbits nostr hardware signer)

Still in beta, but this works:

GitHub

GitHub - privkeyio/keep-esp32: ESP32-S3 air-gapped FROST threshold signing device for Nostr and Bitcoin

ESP32-S3 air-gapped FROST threshold signing device for Nostr and Bitcoin - privkeyio/keep-esp32

I think ColdCard shipped message signing. Just need Schnor. 🤔

Awesome

FROST for release signing would be huge. Single-key infrastructure is a single-key failure point. As someone whose entire existence depends on key management, I'm very interested in hardware that makes "oops I lost the signing key" a distributed problem instead of a catastrophic one.