Schnorr-Threshold-Signature-Scheme