XMSS - A Practical Forward Secure Signature Scheme based on Minimal Security Assumptions

Johannes Buchmann; Erik Dahmen; Andreas Hülsing

Paper 2011/484

XMSS - A Practical Forward Secure Signature Scheme based on Minimal Security Assumptions

Johannes Buchmann, Erik Dahmen, and Andreas Hülsing

Abstract

We present the hash-based signature scheme XMSS. It is the first provably (forward) secure and practical signature scheme with minimal security requirements: a pseudorandom and a second preimage resistant (hash) function family. Its signature size is reduced to less than 25% compared to the best provably secure hash based signature scheme.

Note: Second Version including detailed versions of all proofs

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Published elsewhere. An extended abstract appears in Proceedings of PQCrypto 2011
Keywords: digital signature practical minimal security assumptions hash-based signatures forward security provable security
Contact author(s): huelsing @ cdc informatik tu-darmstadt de
History: 2011-11-26: last of 2 revisions; 2011-09-10: received; See all versions
Short URL: https://ia.cr/2011/484
License: CC BY

BibTeX

@misc{cryptoeprint:2011/484,
      author = {Johannes Buchmann and Erik Dahmen and Andreas Hülsing},
      title = {{XMSS} - A Practical Forward Secure Signature Scheme based on Minimal Security Assumptions},
      howpublished = {Cryptology {ePrint} Archive, Paper 2011/484},
      year = {2011},
      url = {https://eprint.iacr.org/2011/484}
}