XMSS: eXtended Merkle Signature Scheme

This project implements RFC8391, the eXtended Merkle Signature Scheme (XMSS), a hash-based digital signature system that can so far withstand known attacks using quantum computers. This repostiory contains code implementing the single-tree scheme, namely the following parameter sets (see section 5.3. for reference):

This code has no dependencies and is compatible with the official C implementation assuming the appropriate settings (see above) are presumed.

Install

• Run go get https://github.com/danielhavir/go-xmss

Example

package main
import (
    "fmt"
    "github.com/danielhavir/go-xmss"
)
func main() {
    params := xmss.SHA2_16_256
    prv, pub := xmss.GenerateXMSSKeypar(params)
    msg := ...
    sig := prv.Sign(params, msg)
    m := make([]byte, params.SignBytes()+len(msg))
    if xmss.Verify(params, m, *sig, *pub) {
        fmt.Println("Signature matches.")
    } else {
        fmt.Println("Verification does not match.")
    }
}

References

• XMSS: eXtended Merkle Signature Scheme RFC8391
• Official reference C implementation