Questions tagged [hash-based]
The hash-based tag has no summary.
8 questions
0 votes
1 answer
57 views
Security impact of partial key knowledge for stateful hash-based signatures
Let us consider a stateful hash-based signature scheme (e.g. LMS or XMSS) with an $n$-bit hash function where each signature is composed of $x$ hash chains. Assuming an attacker has knowledge of $y &...
5 votes
1 answer
231 views
Hash-based public-key encryption
Over the years, new discoveries have weakened some of the mathematical primitives used in cryptography, like the broken Knapsack cryptosystem, Shor's algorithm, etc. What we believe to be hard ...
3 votes
1 answer
614 views
SHA3-256 vs SHAKE256_256 in XMSS and SPHINCS
By SHAKE256_256, I mean taking first 256 bits of the output of SHAKE256 i.e. SHAKE256_256(M) = SHAKE256(M,256) What is the motivation of choosing SHAKE256_256 ...
0 votes
1 answer
149 views
How come we only need to generate the first tree in each layer in XMSS MT
From what I understand, to reduce the time taken for public key generation, you can use nested trees in XMSS to form Multi-tree XMSS. For an instantion of 2 layers, it seems that the leaf of each L ...