If I only need a small number of signatures (perhaps $2^{10}$) for the lifetime of my key pair, how would I calculate the consequent signature size?

Unfortunately managing state for an LMS or XMSS signature would be an issue, so that's not an option.

  • 2
    $\begingroup$ That computation is surprisingly nontrivial. $\endgroup$ – poncho Aug 6 '19 at 15:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.