Recover reconstructs the full BDN signature S = x * H(m) from a threshold t
of signature shares Si using Lagrange interpolation. The full signature S
can be verified through the regular BDN verification routine using the
shared public key X. The shared public key can be computed by evaluating the
public sharing polynomial at index 0.
VerifySigShare checks the given threshold BDN signature Si on the message m using
the public key share Xi that is associated to the secret key share xi. This
public key share Xi can be computed by evaluating the public sharing
polynomial at the share's index i.
sigShare encodes a threshold BDN signature share Si = i || v where the 2-byte
big-endian value i corresponds to the share's index and v represents the
share's value. The signature share Si is a point on curve G1.