SPHINCS: practical stateless hash-based signatures Daniel J. Bernstein 1,3 , Daira Hopwood 2 , Andreas Hülsing 3 , Tanja Lange 3 , Ruben Niederhagen 3 , Louiza Papachristodoulou 4 , Michael Schneider, Peter Schwabe 4 , and Zooko Wilcox-O’Hearn 2 1 Department of Computer Science, University of Illinois at Chicago, Chicago, IL 60607–7045, USA [email protected] 2 Least Authority, 3450 Emerson Ave. Boulder, CO 80305–6452 USA [email protected], [email protected] 3 Department of Mathematics and Computer Science, Technische Universiteit Eindhoven, P.O. Box 513, 5600 MB Eindhoven, The Netherlands [email protected], [email protected], [email protected] 4 Radboud University Nijmegen, Digital Security Group, P.O. Box 9010, 6500 GL Nijmegen, The Netherlands [email protected], [email protected] Abstract. This paper introduces a high-security post-quantum stateless hash-based signature scheme that signs hundreds of messages per second on a modern 4-core 3.5GHz Intel CPU. Signatures are 41 KB, public keys are 1 KB, and private keys are 1 KB. The signature scheme is de- signed to provide long-term 2 128 security even against attackers equipped with quantum computers. Unlike most hash-based designs, this signature scheme is stateless, allowing it to be a drop-in replacement for current signature schemes. Keywords: post-quantum cryptography, one-time signatures, few-time signatures, hypertrees, vectorized implementation 1 Introduction It is not at all clear how to securely sign operating-system updates, web-site certificates, etc. once an attacker has constructed a large quantum computer: – RSA and ECC are perceived today as being small and fast, but they are broken in polynomial time by Shor’s algorithm. The polynomial is so small that scaling up to secure parameters seems impossible. This work was supported by the National Science Foundation under grant 1018836 and by the Netherlands Organisation for Scientific Research (NWO) under grant 639.073.005 and Veni 2013 project 13114 and by the European Commission through the ICT program under contract INFSO-ICT-284833 (PUFFIN). Permanent ID of this document: 5c2820cfddf4e259cc7ea1eda384c9f9. Date: 2015.02.02.
SPHINCS: practical stateless hash-based signatures
Aug 03, 2023
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Related Documents
