An implementation of Schnorr signatures on the secp256k1 curve (Taproot) for threshold numbers of signers (ROAST).