Optimal parameters for XMSSMT

A.T. Hülsing, L. Rausch, J. Buchmann

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

33 Citations (Scopus)

Abstract

We introduce Multi Tree XMSS (XMSSMT), a hash-based signature scheme that can be used to sign a virtually unlimited number of messages. It is provably forward and hence EU-CMA secure in the standard model and improves key and signature generation times compared to previous schemes. XMSSMT has-like all practical hash-based signature schemes-a lot of parameters that control different trade-offs between security, runtimes and sizes. Using linear optimization, we show how to select provably optimal parameter sets for different use cases.

Original languageEnglish
Title of host publication Security engineering and intelligence informatics
Subtitle of host publicationCD-ARES 2013 Workshops: MoCrySEn and SeCIHD, Regensburg, Germany, September 2-6, 2013. Proceedings
Place of PublicationBerlin
PublisherSpringer
Pages194-208
Number of pages15
ISBN (Electronic)978-3-642-40588-4
ISBN (Print)978-3-642-40587-7
DOIs
Publication statusPublished - 2013
Externally publishedYes
EventCD-ARES 2013 Workshops: 2nd International Workshop on Modern Cryptography and Security Engineering, MoCrySEn 2013 and 3rd International Workshop on Security and Cognitive Informatics for Homeland Defense, SeCIHD 2013 - Regensburg, Germany
Duration: 2 Sep 20136 Sep 2013

Publication series

NameLecture Notes in Computer Science
Volume8128
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349

Conference

ConferenceCD-ARES 2013 Workshops: 2nd International Workshop on Modern Cryptography and Security Engineering, MoCrySEn 2013 and 3rd International Workshop on Security and Cognitive Informatics for Homeland Defense, SeCIHD 2013
CountryGermany
CityRegensburg
Period2/09/136/09/13

Keywords

  • Forward secure signatures
  • Hash-based signatures
  • Implementation
  • Linear optimization
  • Parameter selection

Fingerprint

Dive into the research topics of 'Optimal parameters for XMSSMT'. Together they form a unique fingerprint.

Cite this