Almost everything below is one project at heart: protocols built on top of Schnorr signatures. Threshold variants so a key can be split safely. Adaptor signatures for payments conditioned on a secret. Faster verification for the chain. I write the spec text, the reference Python, and the test vectors that go with them. It's careful, slow work, and I find it deeply satisfying.
A specification for FROST: threshold Schnorr signatures compatible with BIP340, with support for BIP32 key derivation and BIP341 Taproot tweaking. I wrote the BIP text, the Python reference implementation, and the test-vector suite covering the signing-flow algorithms (NonceGen, NonceAgg, Sign, DeterministicSign, PartialSigVerify, PartialSigAgg). The PR is in review on bitcoin/bips and close to merge.
A distributed key-generation protocol that lets a FROST group set up a shared key without trusting a dealer. I co-authored the specification and contributed to the Python reference: message serialization, error handling, the test vectors. Pairs with BIP-445; together they're the spec and the setup story for a working threshold Schnorr stack.
A batch verification module for BIP340 signatures and tweaked-key checks. The first version (secp256k1#1134) came together during a Summer of Bitcoin internship under Jonas Nick and shipped at roughly 1.2× the speed of one-at-a-time verification. Since then it's had a few rounds of follow-up; most recently I reviewed secp256k1#1789, an ecmult refactor that unlocks Pippenger acceleration and pushes the speedup to nearly 2×. The review walked through ABCD cost-model calibration across 13 algorithms.
I rebased and extended the Schnorr adaptor signatures module in secp256k1-zkp. That work cleared the pending review comments and added a Multi-Hop Locks example; the module now ships with a worked protocol alongside it. The Rust bindings in rust-secp256k1-zkp came out of the same effort, with type-safe Adaptor and SecretAdaptor wrappers.
So far I've been to CryptoCamp (Lagos, Portugal · 2025) and Real World Crypto (Taipei · 2026). On the list of places I'd like to get to next: Asiacrypt 2026 in Hong Kong, and PKC 2027 back in Taipei. If you know a good cryptography conference I should be at, find me on the contact page.