Code Signing and Verification with HBSS

High throughput with PQPlatform-Hash

Hash-Based Signature Schemes

Hash-Based Signature Schemes (HBSS) are based on a different mathematical problem to the more recently standardized lattice-based schemes, such as FIPS 204 ML-DSA. The security of hash-based signatures is much better understood than that of lattice-based techniques, although the signature size can be large compared to other signature schemes. They can be viewed as a more conservative option, in cases where the cost can be afforded.

As a result HBSS offers different trade-offs in terms of key sizes (smaller), signature sizes (larger), and processing times for key generation, signature generation, and signature verification. This makes them attractive for specific use cases like code signing and verification among others.

PQPlatform-Hash

Designers of embedded devices face harsh resource constraints in terms of silicon area, memory, and energy consumption, while several use cases require high throughput for HBSS. PQPlatform-Hash is designed to accelerate Hash-Based Signature Schemes, regardless of whether are stateless, or stateful, such as LMS and XMSS, while only requiring minimal additional area. PQPlatform-Hash is ideally suited for any scenario where area constraints meet high demand for signature verification throughput.