Cryptology ePrint Archive: Report 2014/795

SPHINCS: practical stateless hash-based signatures

Daniel J. Bernstein and Daira Hopwood and Andreas Hülsing and Tanja Lange and Ruben Niederhagen and Louiza Papachristodoulou and Michael Schneider and Peter Schwabe and Zooko Wilcox-O'Hearn

Abstract: This paper introduces a high-security post-quantum stateless hash-based signature scheme that signs hundreds of messages per second on a modern 4-core 3.5GHz Intel CPU. Signatures are 41 KB, public keys are 1 KB, and private keys are 1 KB. The signature scheme is designed to provide long-term $2^{128}$ security even against attackers equipped with quantum computers. Unlike most hash-based designs, this signature scheme is stateless, allowing it to be a drop-in replacement for current signature schemes.

Category / Keywords: public-key cryptography / post-quantum cryptography, one-time signatures, few-time signatures, hypertrees, vectorized implementation

Original Publication (in the same form): IACR-EUROCRYPT-2015

Date: received 4 Oct 2014, last revised 2 Feb 2015

Contact author: authorcontact-sphincs at box cr yp to

Available format(s): PDF | BibTeX Citation

Version: 20150202:141508 (All versions of this report)

Short URL:

Discussion forum: Show discussion | Start new discussion

[ Cryptology ePrint archive ]