Bitcoin Forum
May 17, 2024, 05:16:24 PM *
News: Latest Bitcoin Core release: 27.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Re: Proposal for eventual hash replacement  (Read 1643 times)
bitbouillion (OP)
Sr. Member
****
Offline Offline

Activity: 868
Merit: 250



View Profile
October 08, 2014, 04:43:02 PM
 #1

What about SPHINCS?

 http://sphincs.cr.yp.to/

It claims to be quantum-computer-hard.

gmaxwell
Moderator
Legendary
*
expert
Offline Offline

Activity: 4172
Merit: 8421



View Profile WWW
October 08, 2014, 11:01:12 PM
 #2

That isn't a hash function. It's a signature system (sadly one based on the authors team's own Blake and chacha for performance reasons, instead of more standardized functions).

Its focus is on stateless reusable signatures. The cost is that the signatures are huge by our standards... 41,000 bytes (plus a kilobyte pubkey).  In Bitcoin we shouldn't generally have long lived keys and so a 'few times signature' scheme or a small tree of one time signatures (plus state, which the blockchain can provide) are often better and can be done with dramatically smaller sizes.

Certainly thats something I'd use for software releases, however!
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!