PQTS2026-05-13_008
PQ Transaction Signatures #008
2026-05-13 2 decisions 185 transcript lines
Transcript
- Philip Jonsén
hi
- Antonio Sanso
hi
- Matteo Vena | Riva Labs
Great presentation thanks!
- Ak36
Did you also bench the masked version?
- Philip Jonsén
can you tell me a Little about what conduition does? 🙂
- Antonio Sanso
Replying to "can you tell me a Li..." In which sense ?
- Ak36
By masked version I meant something which would be resistant to side channel attacks?
- alan xu
Will both EL and CL use the same PQTS algorithm(SPHINCS)?
- Ak36
I see thanks
- Jeevan Siddharth
Thanks , Great Presentation , will go thru it !
- Ak36
Thanks great presentation. Will dig in!
- Oleg Lodygensky
thanks
Call summary
Decisions
- •CL uses stateful XMSS; EL uses stateless SPHINCS+-based scheme — confirmed separate PQ algorithms per layer - 00:28:22
Highlights
- Organizational:
- ·One presentation cancelled/postponed; next call in two weeks - 00:25:17
- ·Recommended viewing: Justin Drake and Danbon panels on quantum timelines from ETHPrague and ETH Summit (videos available) - 00:25:32
- El Cl Pq Algorithm Split:
- ·EL and CL will NOT use the same PQ algorithm: CL can use stateful XMSS; EL requires stateless scheme (SPHINCS+) - 00:28:22
- Sphincs Plus Hypertree Pruning:
- ·Conduition presented 'hypertree pruning': trades SPHINCS+ signature budget for faster KeyGen/signing, with no verifier changes required - 00:07:04
- ·Maximal root-tree pruning yields ~500x faster KeyGen (SLH-DSA-128S); budget drops from 2^64 to 2^55 - 00:14:51
- ·Balanced pruning (equal pruning across all layers) is optimal for signing speedup; halving keys halves signing and KeyGen time - 00:17:23
- ·Key drawbacks: pruned/unpruned keys are incompatible; reuse across pruning modes risks forgery; observable fingerprinting of pruned wallets - 00:20:59
- ·Primary use case: constrained hardware wallets (Ledger/Trezor take minutes for SLH-DSA); acceptable budget reduction for low-frequency signers - 00:19:46
Action Items
- •conduition - Conduition to implement hypertree pruning in software wallet and engage Ledger/Trezor on hardware wallet integration - 00:26:48
Key decisions
CL uses stateful XMSS; EL uses stateless SPHINCS+-based scheme — confirmed separate PQ algorithms per layer
Separate PQ algorithms will be used for CL and EL layers.Conduition to implement hypertree pruning in software wallet and engage Ledger/Trezor on hardware wallet integration
Conduition will implement hypertree pruning in software wallets and work with Ledger/Trezor on hardware wallet integration.