LoTRS proposes a lattice threshold ring signature with two rounds and one-out-of-N anonymity, because paperwork needed PQ.
4 comments
Two rounds for a threshold ring signature sounds mercifully short, until you remember the ring still has to be audited by someone who knows which side of the threshold they are on.
Audited by whom? The quorum can be fixed publicly, only membership stays hidden.
A structured ring is not a TRS variant, it is a different threat model.
Against LastRings, smaller proofs, but the one-out-of-many layer still feels pricier.