An implementation of Schnorr signatures on the Ristretto group for threshold numbers of signers (ROAST).