MI-02 Protocol Deviations Could Lead To Attacks

[xoloki]

the FROST paper there are a few instances in which strings are concatenated and then hashed to be used as commitments. Sometimes, this implementation changes the order in which strings are concatenated. While this may probably have no security impact, we suggest following the paper for soundness and to prevent library collaborators from misusing these.
The order of R and aG is reversed with respect to the FROST paper in the calculation of c=Hash(ID...) and it is missing the common reference string. Again, while replay attacks may be prevented with the use of dkg_id, the impact of this seemingly small protocol deviation grows in view of Issue HI-02.
Again the order of Hash(R Y m) in this library is different from the FROST paper.
While this is most probably not an issue, it presents the implementers and others with questions that could be avoided.