+ use secure memory allocation from libgcrypt
+ improve oracle function g() by including a second hash function (SHA3)
+ add interactive versions of Chaum-Pedersen PoK of dlog equality
+ implement asynchronous VSS [CKLS02] for DKG
+ provide interactive and distributed (multiparty DZKP) versions for
  bootstrapping non-interactive protocols of VTMF, i.e., key generation
  (for applications that cannot rely on the random oracle assumption or
   the h-generation protocol as building block of ASTC [JL00])
+ DZKP also called "Simultaneous Zero-Knowledge Proofs of Knowledge" [JL00]
+ provide DKG with security against an adaptive adversary [CGJKR99, JL00]
+ provide distributed DSS/DSA key generation and signature scheme [GJKR01]
+ move to event-driven architecture and state-based protocol representation
+ add a generic group abstraction layer, e.g. for future use of ECC groups
+ DKG, ASTC: transform protocols into variants without aiou->Send() [BH92]
+ provide a byzantine consensus protocol for agreement on values

- implement the exotic card and stack operations of the toolbox; there are
  some obstacles, e.g. that the prover does not know all used randomizers,
  for the subset and superset protocols; general protocols for private
  set operations are also not useful, because they do not provide the link
  from the shuffled deck to individual set operations
