Run a local DKG

Prerequisites: the confium CLI.

confium threshold dkg --scheme cmp20 --threshold 3 --parties 5 --out shares.json

The output is a JSON share envelope: the joint public key plus all five shares. In a real deployment each party keeps exactly one share and the envelope is never written to a shared file — see the scheme crates’ session APIs (confium-tc-frost-p256) for per-party runs.

Verify the envelope round-trips:

confium threshold sign --shares shares.json --message "hello" --out signature.hex