On the topic of threshold ECC, I'll point to an implementation I ran across recently: https://github.com/cwgit/ximix/tree/master/common/src/main/java/org/cryptoworkshop/ximix/common/crypto/threshold The entire repo seems particularly interesting, but I haven't had time to dig into it closely. RPC-based mixnet? -tom