SPHINCS : practical stateless hash-based signatures

D.J. Bernstein, D. Hopwood, A.T. Hülsing, T. Lange, R.F. Niederhagen, L. Papachristodoulou, P. Schwabe, Z. Wilcox O'Hearn

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

239 Citations (Scopus)

Abstract

This paper introduces a high-security post-quantum stateless hash-based signature scheme that signs hundreds of messages per second on a modern 4-core 3.5GHz Intel CPU. Signatures are 41 KB, public keys are 1 KB, and private keys are 1 KB. The signature scheme is designed to provide long-term 2^{128} security even against attackers equipped with quantum computers. Unlike most hash-based designs, this signature scheme is stateless, allowing it to be a drop-in replacement for current signature schemes. Keywords: Post-quantum cryptography; One-time signatures; Few-time signatures; Hypertrees; Vectorized implementation
Original languageEnglish
Title of host publicationAdvances in Cryptology - Eurocrypt 2015 (34th Annual International Conference on the Theory and Applications of Cryptographic Techniques, Sofia, Bulgaria, April 26-30, 2015. Proceedings, Part I)
EditorsE. Oswald, M. Fischlin
Place of PublicationBerlin
PublisherSpringer
Pages368-397
ISBN (Print)978-3-662-46799-2
DOIs
Publication statusPublished - 2015
Event34th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Eurocrypt 2015) - Sofia Hotel Balkan, Sofia, Bulgaria
Duration: 26 Apr 201530 Apr 2015
Conference number: 34
https://www.cosic.esat.kuleuven.be/eurocrypt_2015/

Publication series

NameLecture Notes in Computer Science
Volume9056
ISSN (Print)0302-9743

Conference

Conference34th Annual International Conference on the Theory and Applications of Cryptographic Techniques (Eurocrypt 2015)
Abbreviated titleEurocrypt 2015
Country/TerritoryBulgaria
CitySofia
Period26/04/1530/04/15
Internet address

Fingerprint

Dive into the research topics of 'SPHINCS : practical stateless hash-based signatures'. Together they form a unique fingerprint.

Cite this