A scheme where any t-of-n participants can jointly produce a single valid signature without reconstructing a full key.