Struct Shake128s 

pub struct Shake128s;

SLH-DSA-SHAKE-128s parameter set (NIST security level 1, small signatures).

Provides 128-bit security with relatively compact signatures (~7856 bytes) but slower signing and verification compared to Shake128f.

Trait Implementations

impl Clone for Shake128s

fn clone(&self) -> Shake128s

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for Shake128s

fn default() -> Shake128s

Returns the “default value” for a type.

impl Params for Shake128s

const N: usize = 16

Security parameter n: hash output length in bytes.

const H: usize = 63

Total hypertree height: h = d * h'.

const D: usize = 7

Number of layers d in the hypertree.

const H_PRIME: usize = 9

Height h' of each individual XMSS tree within the hypertree.

const A: usize = 12

Height a of each FORS tree (each tree has 2^a leaves).

const K: usize = 14

Number k of FORS trees used per signature.

const M: usize = 30

Message digest length m in bytes, output by H_msg.

const NAME: &'static str = "SLH-DSA-SHAKE-128s"

Human-readable name of this parameter set (e.g., "SLH-DSA-SHAKE-128f").

const LG_W: usize = 4

Winternitz parameter lg(w), always 4 for SHAKE-based parameter sets.

const W: usize = 16

Winternitz parameter w = 2^lg_w = 16.

const LEN1: usize = _

WOTS+ parameter len1 = ceil(8*n / lg_w) = 2*n (since lg_w = 4).

const LEN2: usize = 3

WOTS+ parameter len2 = 3 for all SHAKE-based parameter sets.

const LEN: usize = _

WOTS+ parameter len = len1 + len2: total number of hash chains.

const PK_LEN: usize = _

Public key size in bytes: 2*n (PK.seed || PK.root).

const SK_LEN: usize = _

Secret key size in bytes: 4*n (SK.seed || SK.prf || PK.seed || PK.root).