LoTRS proposes a lattice threshold ring signature with two rounds and one-out-of-N anonymity, because paperwork needed PQ.