PQ Transaction Signatures #008
Transcript
Ask about this call
Answered from this call's summary and transcript only.
AI-generated — verify against the recording.
Call summary
Decisions
- •CL uses stateful XMSS; EL uses stateless SPHINCS+-based scheme — confirmed separate PQ algorithms per layer — 00:28:22
Highlights
- Organizational:
- ·One presentation cancelled/postponed; next call in two weeks — 00:25:17
- ·Recommended viewing: Justin Drake and Danbon panels on quantum timelines from ETHPrague and ETH Summit (videos available) — 00:25:32
- El Cl Pq Algorithm Split:
- ·EL and CL will NOT use the same PQ algorithm: CL can use stateful XMSS; EL requires stateless scheme (SPHINCS+) — 00:28:22
- Sphincs Plus Hypertree Pruning:
- ·Conduition presented 'hypertree pruning': trades SPHINCS+ signature budget for faster KeyGen/signing, with no verifier changes required — 00:07:04
- ·Maximal root-tree pruning yields ~500x faster KeyGen (SLH-DSA-128S); budget drops from 2^64 to 2^55 — 00:14:51
- ·Balanced pruning (equal pruning across all layers) is optimal for signing speedup; halving keys halves signing and KeyGen time — 00:17:23
- ·Key drawbacks: pruned/unpruned keys are incompatible; reuse across pruning modes risks forgery; observable fingerprinting of pruned wallets — 00:20:59
- ·Primary use case: constrained hardware wallets (Ledger/Trezor take minutes for SLH-DSA); acceptable budget reduction for low-frequency signers — 00:19:46
Action Items
- •conduition — Conduition to implement hypertree pruning in software wallet and engage Ledger/Trezor on hardware wallet integration — 00:26:48
Meeting chat12
- Philip Jonsén
hi
- Antonio Sanso
hi
- Matteo Vena | Riva Labs
Great presentation thanks!
- Ak36
Did you also bench the masked version?
- Philip Jonsén
can you tell me a Little about what conduition does? 🙂
- Antonio Sanso
Replying to "can you tell me a Li..." In which sense ?
- Ak36
By masked version I meant something which would be resistant to side channel attacks?
- alan xu
Will both EL and CL use the same PQTS algorithm(SPHINCS)?
- Ak36
I see thanks
- Jeevan Siddharth
Thanks , Great Presentation , will go thru it !
- Ak36
Thanks great presentation. Will dig in!
- Oleg Lodygensky
thanks
Key decisions
CL uses stateful XMSS; EL uses stateless SPHINCS+-based scheme — confirmed separate PQ algorithms per layer
Separate PQ algorithms will be used for CL and EL layers.Conduition to implement hypertree pruning in software wallet and engage Ledger/Trezor on hardware wallet integration
Conduition will implement hypertree pruning in software wallets and work with Ledger/Trezor on hardware wallet integration.

