In Summer 2023, the Zcash Foundation engaged NCC Group to conduct a security
assessment of the Foundation’s FROST threshold signature implementation, based on the
paper FROST: Flexible Round-Optimized Schnorr Threshold Signatures. This project
implements v12 of the draft FROST specification in Rust, with a variety of options available
for underlying elliptic curve groups. The review was performed by three consultants over 25 person-days of effort. The project concluded with a retest phase a few weeks after the original engagement that confirmed all findings were fixed.

During late summer 2023, Aleo Systems Inc. engaged NCC Group’s Cryptography Services team to conduct an implementation review of several components of snarkVM, a virtual machine for zero-knowledge proofs. The snarkVM platform allows users to write and execute smart contracts in an efficient, yet privacy-preserving manner by leveraging zero-knowledge succinct non-interactive arguments of knowledge (zk-SNARKs). The review was performed remotely by 4 consultants with a combined total of 60 person-days of effort, including a retest phase performed a few months after the original engagement.