DME-Sign
Multivariate · Deterministic Trapdoor Permutation · csrc.nist.gov(opens in a new tab)
- Programmes
- On-ramp R1
- Latest version
- Round 1 ·
- Security flags
- Broken (all sets)
Parameter sets
Round 1 · 1 Jun 2023
| Parameter set | Level | pk (B) | sig (B) | pk+sig (B) | Sign | Verify |
|---|---|---|---|---|---|---|
| 2^64 Broken | 5 | 2,889 | 64 | 2,953 | 40.0 µs | 10.0 µs |
| 2^48 Broken | 3 | 2,169 | 48 | 2,217 | 40.0 µs | 10.0 µs |
| 2^32 Broken | 1 | 1,449 | 32 | 1,481 | 20.0 µs | 10.0 µs |
Wall-clock times vary between runs and machines (CPU frequency scaling, other tenants on cloud VMs); cycle counts are the steadier basis for comparison.
Security flags
- Broken (all parameter sets): 2^96 signature forgery
Only one version of DME-Sign is recorded, so there is nothing to compare yet.
History
- New version
Round 1