Hash-based cryptography: Difference between revisions

Revision as of 13:08, 5 May 2017

Revision as of 13:17, 5 May 2017

Line 1:

'''Hash-based cryptography''' is the generic term for constructions of [[cryptographic primitive]]s based on the security of hash functions. So far, hash-based cryptography is limited to [[digital signature]]s schemes such as the [[Merkle signature scheme]]. Hash-based signature schemes combine a one-time signature scheme with a [[Merkle tree]] structure. [[Lamport signature]]s are an example of a one-time signature scheme that can be combined with a Merkle tree structure. Hash-based cryptography is a type of [[post-quantum cryptography]].

Hash-based signature schemes rely on security assumptions about the underlying hash function, but any hash function fulfilling these assumptions can be used. As a consequence, each adequate hash function yields a different corresponding hash-based signature scheme.

==History==

Ralph Merkle invented hash-based signatures in 1979.

==Hash-based signature schemes==

In addition to Merkle's seminal scheme, more recent hash-based signature schemes include the stateful XMSS schemes and the stateless SPHINCS scheme.

{{Crypto-stub}}