mirror of
https://github.com/lux-apps/papers.git
synced 2026-11-02 11:39:52 +00:00
zeekay
abf99d05fc
Restructured from flat .tex/.pdf files into per-paper subdirectories. Added Antje Worring as co-author on all papers. Synced PDFs to pdfs/ for download site.
23 lines
919 B
TeX
23 lines
919 B
TeX
\section{Signature Size Analysis}
|
|
|
|
|
|
The practical cost of PQ migration is larger signatures:
|
|
|
|
\begin{center}
|
|
\begin{tabular}{lrrr}
|
|
\toprule
|
|
\textbf{Algorithm} & \textbf{Public Key} & \textbf{Signature} & \textbf{Security Level} \\
|
|
\midrule
|
|
secp256k1 (ECDSA) & 33 B & 64 B & 128-bit classical \\
|
|
BLS12-381 & 48 B & 96 B (48 aggregated) & 128-bit classical \\
|
|
ML-DSA-44 & 1,312 B & 2,420 B & NIST Level 2 (128-bit PQ) \\
|
|
ML-DSA-65 & 1,952 B & 3,309 B & NIST Level 3 (192-bit PQ) \\
|
|
ML-DSA-87 & 2,592 B & 4,627 B & NIST Level 5 (256-bit PQ) \\
|
|
SLH-DSA-128s & 32 B & 7,856 B & NIST Level 1 (conservative) \\
|
|
\bottomrule
|
|
\end{tabular}
|
|
\end{center}
|
|
|
|
ML-DSA-65 signatures are 51.7$\times$ larger than ECDSA. Without aggregation, per-block inclusion of $N$ ML-DSA signatures would be prohibitive. STARK aggregation compresses $N$ ML-DSA signatures to $\sim$200 bytes, making the per-epoch cost independent of validator count.
|
|
|