【报告摘要】Threshold signature schemes allow the signing key to be distributed among a group of signers, with a signature being issued if and only if a threshold number of signers are involved. These schemes have gained significant attention recently, particularly for their use in cryptocurrency wallets to mitigate single points of failure, as well as for ongoing standardization efforts by NIST. I will first go through the state-of-the-art construction based on pairing-free elliptic curves, which are highly desirable for real-world applications due to strong library support compared to pairing-based constructions and smaller signature sizes compared to RSA-based schemes. Then, I will explain how to transform these pairing-free constructions into efficient lattice-based alternatives.