Optimal parameters for XMSSMT

A.T. Hülsing, L. Rausch, J. Buchmann

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

55 Citations (Scopus)

Abstract

We introduce Multi Tree XMSS (XMSSMT), a hash-based signature scheme that can be used to sign a virtually unlimited number of messages. It is provably forward and hence EU-CMA secure in the standard model and improves key and signature generation times compared to previous schemes. XMSSMT has-like all practical hash-based signature schemes-a lot of parameters that control different trade-offs between security, runtimes and sizes. Using linear optimization, we show how to select provably optimal parameter sets for different use cases.

Original languageEnglish
Title of host publication Security engineering and intelligence informatics
Subtitle of host publicationCD-ARES 2013 Workshops: MoCrySEn and SeCIHD, Regensburg, Germany, September 2-6, 2013. Proceedings
Place of PublicationBerlin
PublisherSpringer
Pages194-208
Number of pages15
ISBN (Electronic)978-3-642-40588-4
ISBN (Print)978-3-642-40587-7
DOIs
Publication statusPublished - 2013
EventCD-ARES 2013 Workshops: 2nd International Workshop on Modern Cryptography and Security Engineering, MoCrySEn 2013 and 3rd International Workshop on Security and Cognitive Informatics for Homeland Defense, SeCIHD 2013 - Regensburg, Germany
Duration: 2 Sept 20136 Sept 2013

Publication series

NameLecture Notes in Computer Science
Volume8128
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

ConferenceCD-ARES 2013 Workshops: 2nd International Workshop on Modern Cryptography and Security Engineering, MoCrySEn 2013 and 3rd International Workshop on Security and Cognitive Informatics for Homeland Defense, SeCIHD 2013
Country/TerritoryGermany
CityRegensburg
Period2/09/136/09/13

Keywords

  • Forward secure signatures
  • Hash-based signatures
  • Implementation
  • Linear optimization
  • Parameter selection

Fingerprint

Dive into the research topics of 'Optimal parameters for XMSSMT'. Together they form a unique fingerprint.

Cite this