Changes between Version 6 and Version 7 of OneHundredYearCryptography

Timestamp:

2010-08-10T16:44:23Z (15 years ago)

Author:

zooko

Comment:

add parameters

OneHundredYearCryptography

@@ -30 +30 @@
  * http://tahoe-lafs.org/pipermail/tahoe-dev/2010-July/004587.html
 
-Brian and David-Sarah wrote [wiki:OneHundredYearCryptography/hashbasedsig.py a simulator] or two to explore performance trade-offs in hash-based signature parameters. The output of one run is this:
+Brian and David-Sarah wrote [wiki:OneHundredYearCryptography/hashbasedsig.py a simulator] or two to explore performance trade-offs in hash-based signature parameters. The output of one run with the following parameters is this:
+{{{
+# range of hash output lengths
+range_L_hash = [128]
+
+lg_M = 53                   # lg(required number of signatures before losing security)
+
+limit_bytes = 480000        # limit on signature length
+limit_cost = 500            # limit on Mcycles_Sig + weight_ver*Mcycles_ver
+weight_ver = 1              # how important verification cost is relative to signature cost
+                            # (note: setting this too high will just exclude useful candidates)
+
+L_block = 512               # bitlength of hash input blocks
+L_pad   = 64                # bitlength of hash padding overhead (for M-D hashes)
+L_label = 80                # bitlength of hash position label
+L_prf   = 256               # bitlength of hash output when used as a PRF
+cycles_per_byte = 15.8      # cost of hash
+}}}
 {{{
   w   A   h    T    lg_N   L_GMSS (bytes)   c_S_mean (Mcycles)  c_S_worst (Mcycles)   score