tss: threshold signature scheme