Threshold cryptosystem