Smaller Sphincs+

ePrint Report: Smaller Sphincs+

Scott Fluhrer, Quynh Dang

NIST has released the draft specification of SLH-DSA (also known as Sphincs+). When NIST released its original call for proposals for the Postquantum Process, they specified that signature systems would need to be usable at full security for $2^{64}$ signatures per private key. Hence, the parameter sets specified in SLH-DSA is tuned to have full security after that many signatures. However, it has been noted that in many cases, we don't have …

call call for proposals draft dsa eprint report key nist parameter private private key process proposals report security signature signatures systems