Algorithm

WOTS+

Family: hash-based.

WOTS+ is a one-time signature scheme: a key pair can safely sign a single message. It works by revealing selected points along chains of hash computations. It is a building block inside XMSS and SPHINCS+, not a full system for many signatures. LMS uses a related Winternitz scheme, LM-OTS. Some blockchain designs use it directly, with a fresh key for every transaction.

Safety: High

Why this rating

Security rests only on the properties of the hash function. A key is strictly one-time: signing two different messages with it can reveal enough of the secret to forge signatures. Used alone, the user or wallet must never reuse a key, so state tracking is essential.

Standard

https://eprint.iacr.org/2017/965

Research

• WOTS+: Shorter Signatures for Hash-Based Signature Schemes (2013)
• RFC 8391: XMSS: eXtended Merkle Signature Scheme

Implemented by

• hashsigs