6 ms·
Can someone remind me why Merkle trees of Lamport signatures aren’t the solution for postquantum asymmetric signing? Sure the signatures are huge, but they’re s
by karl_gluck 4y ago
Can someone remind me why Merkle trees of Lamport signatures aren’t the solution for postquantum asymmetric signing? Sure the signatures are huge, but they’re secure unless you can trivially invert the hash function.
- tptacek 4y agoSIDH/SIKE is a key exchange mechanism, not a signature scheme.