Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

SPHINCS: Practical Stateless Hash-Based Signatures

Daniel J. Bernstein, Daira Hopwood, Andreas Hülsing, Tanja Lange, Ruben Niederhagen, Louiza Papachristodoulou, Michael Schneider, Peter Schwabe, Zooko Wilcox-O’Hearn

Published Jan 1, 2015• 387 citations
Publisher

Abstract

This paper introduces a high-security post-quantum stateless hash-based signature scheme that signs hundreds of messages per second on a modern 4-core 3.5GHz Intel CPU. Signatures are 41 KB, public keys are 1 KB, and private keys are 1 KB. The signature scheme is designed to provide long-term $$2^{128}$$ security even against attackers equipped with quantum computers. Unlike most hash-based designs, this signature scheme is stateless, allowing it to be a drop-in replacement for current signature schemes.

DOI
10.1007/978-3-662-46800-5_15

Related papers

An Analysis of Existing Hash-Based Post-Quantum Signature Schemes

Cristina Maria Păcurar, Răzvan Bocu, Maksim Iavich

The rapid development of quantum computing poses challenges to the foundations of traditional cryptography. The threats are significant in terms of both asymmetric cryptography (which exposes schemes like RSA and ECC to efficient attacks) and symmetric cryptography, where key sizes must be increased to mitigate these threats. In this paper, we review the evolution of hash-based digital signatures, from early one-time signatures to modern stateless schemes, with an emphasis on their security properties, efficiency, and practical constraints. Moreover, we propose a simple comparative metric that reflects structural symmetry across key parameters such as key size, signature size, and computational cost, enabling a visual clustering of the schemes. We give particular attention to recent developments such as Verkle trees, which preserve symmetric design principles while improving scalability and proof compactness. The study highlights ongoing tradeoffs between stateful and stateless designs and argues for the continued relevance of symmetric cryptographic constructions in building secure, efficient post-quantum systems.

Symmetry•Jun 10, 2025•3 citations

Improvement of Post-Quantum Signatures

Ming-Yi Syu, Wen‐Chung Kuo, Ming-Chun Wei +1 more

Recently, NIST released the quantum cryptography standard, which includes three new encryption algorithms capable of effectively resisting attacks from quantum computers. Experts predict that quantum computers with the ability to break current encryption methods may emerge within the next decade. In particular, the advent of Shor’s algorithm [1] has rendered public-key encryption systems based on factoring and discrete logarithm problems vulnerable. Therefore, the release of the PQC (Post-Quantum Cryptography) standard is especially timely and significant. NIST encourages system administrators to begin integrating these standards into their systems immediately to ensure future security.Among these three new encryption algorithms, SLH-DSA (derived from SPHINCS+ [2]) is a stateless hash-based digital signature scheme. This innovative scheme is designed to provide robust security while maintaining efficiency. In the SLH-DSA signature scheme, the One-Time Signature (OTS) serves as its fundamental building block. This means that improving the OTS directly enhances the overall performance of the SLH-DSA scheme.Hash-based signature schemes are generally constructed using OTS schemes. The underlying OTS scheme plays a crucial role in determining the key size and signature size of hash-based signature schemes. We propose a novel signature scheme that allows partial key reuse while maintaining a minimum quantum security level of 128 bits. Compared to the popular Winternitz OTS scheme [3] [4] [5], our proposed signature scheme demonstrates superior performance in terms of key and signature sizes for the same number of signatures, while still preserving post-quantum security.

Advances in transdisciplinary engineering•Oct 13, 2025•0 citations

Post-Quantum Cryptography: Mathematical Foundations and Future Challenges

Yiqing Jiang

Modern public-key cryptography relies on the hardness of mathematical problems such as integer factorization and discrete logarithms. However, the development of quantum computing poses an imminent threat to these assumptions. Shor’s algorithm, in particular, can factor large semiprimes exponentially faster than classical algorithms, compromising systems like RSA, DSA, and ECC. This paper explores the mathematical foundations of pre-quantum cryptography, discusses the limitations of classical security models when confronted with quantum capabilities, and then pays attention to post-quantum cryptography (PQC), a field dedicated to developing cryptographic schemes resilient against both classical and quantum attacks. Among the proposed families, this paper focuses specifically on hash function–based cryptography for its simplicity and minimal reliance on algebraic structure. This study focuses in particular on SPHINCS+, a stateless hash-based digital signature scheme currently under consideration by NIST. Through detailed mathematical explanation and a visual example, we analyze its construction using Winternitz One-Time Signatures and Merkle trees. The results highlight SPHINCS+ as a robust candidate for post-quantum security due to its reliance on well-understood hash primitives and its resistance to known quantum algorithms such as Grover’s. Finally, this paper discusses ongoing challenges such as performance trade-offs, standardization, and real-world deployment. This research underscores the urgency of adopting quantum-resistant cryptographic systems before large-scale quantum computers become a reality.

Theoretical and Natural Science•Jul 24, 2025•0 citations

FROG: Forward-Secure Post-Quantum Signature

Attila A. Yavuz, Rouzbeh Behnia

Forward-secure signatures guarantee that the signatures generated before the compromise of private key remain secure, and therefore offer an enhanced compromise-resiliency for real-life applications such as digital forensics, audit logs, and financial systems. However, the vast majority of state-of-the-art forward-secure signatures rely on conventional intractability assumptions and therefore are not secure against quantum computers. Hash-based signatures (HBS) (e.g., XMSS) can offer forward-secure post-quantum security. However, they are efficient only for a pre-defined number of messages to be signed and incur high key generation overhead, highly expensive signing, and large signature sizes for an increasing number of messages. It is an open problem to develop quantum-safe forward-secure signatures that are efficient and practical with a signing capability scalable to their security parameters. In this work, we propose a new series of post-quantum signatures that we call FROG (Forward-secuRe pOst-quantum siGnature). Unlike HBS alternatives, FROG can achieve highly computational efficient signatures with sub-linear key/signature sizes and (practically) unbounded signing capability. This is achieved by transforming suitable post-quantum signatures into forward-secure settings via MMM constructions. We investigated the transformation of prominent post-quantum secure signatures such as Dilithium, WOTS, and BLISS with MMM. Our experiments indicate that FROG outperforms XMSS for the vast majority (if not all for a large number of messages) of performance metrics. We also discuss one-time variants of these base signature schemes that can push the performance of FROG to the edge. Overall, FROG shows a better performance than the existing alternatives with forward-security and therefore is an ideal alternative for the standardization efforts for forward-secure post-quantum signatures.

arXiv:2205.07112•May 14, 2022•1 citation

SPHINCS-Simpira: Fast Stateless Hash-based Signatures with Post-quantum Security

Shay Gueron, Nicky Mouha

•Jun 29, 2017•17 citations

Post-quantum algorithms for digital signing in Public Key Infrastructures

Mikael Sjöberg

One emerging threat to Public Key Infrastructures is the possible development of large-scale quantum computers, which would be able to break the public-key cryptosystems used today. Several possibly post-quantum secure cryptographic algorithms have been proposed but so far they have not been used in many practical settings. The purpose of this thesis was to find post-quantum digital signature algorithms that might be suitable for use in Public Key Infrastructures today. To answer the research question, an extensive literature study was conducted where relevant algorithms were surveyed. Algorithms with high-grade implementations in different cryptographic libraries were benchmarked for performance. Hash-based XMSS and SPHINCS, multivariate-based Rainbow and lattice-based BLISS-B were benchmarked and the results showed that BLISS-B offered the best performance, on par with RSA and ECDSA. All the algorithms did however have relatively large signature sizes and/or key sizes. Support for post-quantum digital signature algorithms in Public Key Infrastructure products could easily be achieved since many algorithms are implemented in cryptographic libraries. The algorithms that could be recommended for use today were SPHINCS for high-security applications and possibly BLISS-B for lower security applications requiring higher efficiency. The biggest obstacles to widespread deployment of post-quantum algorithms was deemed to be lack of standardisation and either inefficient operations compared to classical algorithms, uncertain security levels, or both.

•Jan 1, 2017•7 citations
This paper introduces a high-security post-quantum stateless hash-based signature scheme that signs hundreds of messages per second on a modern 4-core 3.5GHz Intel CPU. Signatures are 41 KB, public keys are 1 KB, and private keys are 1 KB. The signature scheme is designed to provide long-term 21282^{128}2128 security even against attackers equipped with quantum computers. Unlike most hash-based designs, this signature scheme is stateless, allowing it to be a drop-in replacement for current signature schemes.
The rapid development of quantum computing poses challenges to the foundations of traditional cryptography. The threats are significant in terms of both asymmetric cryptography (which exposes schemes like RSA and ECC to efficient attacks) and symmetric cryptography, where key sizes must be increased to mitigate these threats. In this paper, we review the evolution of hash-based digital signatures, from early one-time signatures to modern stateless schemes, with an emphasis on their security properties, efficiency, and practical constraints. Moreover, we propose a simple comparative metric that reflects structural symmetry across key parameters such as key size, signature size, and computational cost, enabling a visual clustering of the schemes. We give particular attention to recent developments such as Verkle trees, which preserve symmetric design principles while improving scalability and proof compactness. The study highlights ongoing tradeoffs between stateful and stateless designs and argues for the continued relevance of symmetric cryptographic constructions in building secure, efficient post-quantum systems.
Recently, NIST released the quantum cryptography standard, which includes three new encryption algorithms capable of effectively resisting attacks from quantum computers. Experts predict that quantum computers with the ability to break current encryption methods may emerge within the next decade. In particular, the advent of Shor’s algorithm [1] has rendered public-key encryption systems based on factoring and discrete logarithm problems vulnerable. Therefore, the release of the PQC (Post-Quantum Cryptography) standard is especially timely and significant. NIST encourages system administrators to begin integrating these standards into their systems immediately to ensure future security.Among these three new encryption algorithms, SLH-DSA (derived from SPHINCS+ [2]) is a stateless hash-based digital signature scheme. This innovative scheme is designed to provide robust security while maintaining efficiency. In the SLH-DSA signature scheme, the One-Time Signature (OTS) serves as its fundamental building block. This means that improving the OTS directly enhances the overall performance of the SLH-DSA scheme.Hash-based signature schemes are generally constructed using OTS schemes. The underlying OTS scheme plays a crucial role in determining the key size and signature size of hash-based signature schemes. We propose a novel signature scheme that allows partial key reuse while maintaining a minimum quantum security level of 128 bits. Compared to the popular Winternitz OTS scheme [3] [4] [5], our proposed signature scheme demonstrates superior performance in terms of key and signature sizes for the same number of signatures, while still preserving post-quantum security.
Modern public-key cryptography relies on the hardness of mathematical problems such as integer factorization and discrete logarithms. However, the development of quantum computing poses an imminent threat to these assumptions. Shor’s algorithm, in particular, can factor large semiprimes exponentially faster than classical algorithms, compromising systems like RSA, DSA, and ECC. This paper explores the mathematical foundations of pre-quantum cryptography, discusses the limitations of classical security models when confronted with quantum capabilities, and then pays attention to post-quantum cryptography (PQC), a field dedicated to developing cryptographic schemes resilient against both classical and quantum attacks. Among the proposed families, this paper focuses specifically on hash function–based cryptography for its simplicity and minimal reliance on algebraic structure. This study focuses in particular on SPHINCS+, a stateless hash-based digital signature scheme currently under consideration by NIST. Through detailed mathematical explanation and a visual example, we analyze its construction using Winternitz One-Time Signatures and Merkle trees. The results highlight SPHINCS+ as a robust candidate for post-quantum security due to its reliance on well-understood hash primitives and its resistance to known quantum algorithms such as Grover’s. Finally, this paper discusses ongoing challenges such as performance trade-offs, standardization, and real-world deployment. This research underscores the urgency of adopting quantum-resistant cryptographic systems before large-scale quantum computers become a reality.
Forward-secure signatures guarantee that the signatures generated before the compromise of private key remain secure, and therefore offer an enhanced compromise-resiliency for real-life applications such as digital forensics, audit logs, and financial systems. However, the vast majority of state-of-the-art forward-secure signatures rely on conventional intractability assumptions and therefore are not secure against quantum computers. Hash-based signatures (HBS) (e.g., XMSS) can offer forward-secure post-quantum security. However, they are efficient only for a pre-defined number of messages to be signed and incur high key generation overhead, highly expensive signing, and large signature sizes for an increasing number of messages. It is an open problem to develop quantum-safe forward-secure signatures that are efficient and practical with a signing capability scalable to their security parameters. In this work, we propose a new series of post-quantum signatures that we call FROG (Forward-secuRe pOst-quantum siGnature). Unlike HBS alternatives, FROG can achieve highly computational efficient signatures with sub-linear key/signature sizes and (practically) unbounded signing capability. This is achieved by transforming suitable post-quantum signatures into forward-secure settings via MMM constructions. We investigated the transformation of prominent post-quantum secure signatures such as Dilithium, WOTS, and BLISS with MMM. Our experiments indicate that FROG outperforms XMSS for the vast majority (if not all for a large number of messages) of performance metrics. We also discuss one-time variants of these base signature schemes that can push the performance of FROG to the edge. Overall, FROG shows a better performance than the existing alternatives with forward-security and therefore is an ideal alternative for the standardization efforts for forward-secure post-quantum signatures.
One emerging threat to Public Key Infrastructures is the possible development of large-scale quantum computers, which would be able to break the public-key cryptosystems used today. Several possibly post-quantum secure cryptographic algorithms have been proposed but so far they have not been used in many practical settings. The purpose of this thesis was to find post-quantum digital signature algorithms that might be suitable for use in Public Key Infrastructures today. To answer the research question, an extensive literature study was conducted where relevant algorithms were surveyed. Algorithms with high-grade implementations in different cryptographic libraries were benchmarked for performance. Hash-based XMSS and SPHINCS, multivariate-based Rainbow and lattice-based BLISS-B were benchmarked and the results showed that BLISS-B offered the best performance, on par with RSA and ECDSA. All the algorithms did however have relatively large signature sizes and/or key sizes. Support for post-quantum digital signature algorithms in Public Key Infrastructure products could easily be achieved since many algorithms are implemented in cryptographic libraries. The algorithms that could be recommended for use today were SPHINCS for high-security applications and possibly BLISS-B for lower security applications requiring higher efficiency. The biggest obstacles to widespread deployment of post-quantum algorithms was deemed to be lack of standardisation and either inefficient operations compared to classical algorithms, uncertain security levels, or both.