665 |
Tradeoffs in deterministic key boosting |
Tradeoffs in deterministic key boosting |
666 |
--------------------------------------- |
--------------------------------------- |
667 |
|
|
668 |
|
Supporting multiple signatures is possible e.g. in BiBa, |
669 |
|
but inefficient. Merkle hash trees better |
670 |
|
|
671 |
|
we want the full deterministic |
672 |
|
algorithm, |
673 |
|
that, which requires `$ nN = 160 $` |
674 |
|
|
675 |
|
2, 80 |
676 |
|
3, 54 |
677 |
|
4, 40 |
678 |
|
5, 32 |
679 |
|
6, 27 |
680 |
|
7, 23 |
681 |
|
8, 20 |
682 |
|
9, 18 |
683 |
|
10, 16 |
684 |
|
11, 15 |
685 |
|
12, 14 |
686 |
|
13, 13 |
687 |
|
... |
688 |
|
|
689 |
|
|
690 |
|
|
691 |
|
|
692 |
- we demand security level `$2^{-160}$` for our underlying schemes |
- we demand security level `$2^{-160}$` for our underlying schemes |
693 |
|
|