Very briefly, how does eXtended Merkle Signature Scheme (XMSS) stack up against Leighton-Micali Signature (LMS)?
I'm asking this in the context of my article here.
0
$\begingroup$
$\endgroup$
-
1$\begingroup$ If you want people to find your linkedin, please use your profile page and not your posts. Also why did you link to your article (I just assumed it's for context, but this may be wrong)? $\endgroup$ – SEJPM♦ Feb 5 '18 at 19:51
2
$\begingroup$
$\endgroup$
I'm asking this in the context of my article here.
I don't see how your article has any reference to stateful signatures at all.
In any case, the differences are:
They have provable security in different models; XMSS in the concrete model, LMS in the random oracle model
LMS is about 3 to 5 times faster than XMSS (assuming that the messages are short)
I suspect that, if you use a stateful signature scheme in a block chain solution, neither difference is that significant.
The two standards also allow different sets of tree heights/Winternitz parameters, but there's nothing inherent in the two ideas to restrict things. I'm pretty sure that if have your heart set on one parameter set that works great for your application, you can ask the authors for it.
