The sizes of the keys and signatures aren't even the most important factor. Security of the algorithm comes first. And I just don't know enough.

All I really care about is flexibility at this point -- make things work with any key size and any signature size and any algorithm, so that it is PQ ready, without actually making any choices right now. I'm hoping the cryptographers make better stuff in the future before we need these.

Reply to this note

Please Login to reply.

Discussion

No replies yet.