International Association for Cryptologic Research

International Association
for Cryptologic Research

IACR News item: 08 January 2024

Scott Fluhrer, Quynh Dang
ePrint Report ePrint Report
NIST has released the draft specification of SLH-DSA (also known as Sphincs+). When NIST released its original call for proposals for the Postquantum Process, they specified that signature systems would need to be usable at full security for $2^{64}$ signatures per private key. Hence, the parameter sets specified in SLH-DSA is tuned to have full security after that many signatures. However, it has been noted that in many cases, we don't have need for that many signatures, and that parameter sets tuned for fewer signatures would be shorter and more efficient to process. This paper examines such possible alternative parameter sets.
Expand

Additional news items may be found on the IACR news page.