{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T12:41:24Z","timestamp":1782996084077,"version":"3.54.5"},"reference-count":47,"publisher":"Association for Computing Machinery (ACM)","issue":"2","license":[{"start":{"date-parts":[[2024,3,27]],"date-time":"2024-03-27T00:00:00Z","timestamp":1711497600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Deutsche Forschungsgemeinschaft (DFG, German Research Foundation) under Germany\u2019s Excellence Strategy","award":["EXC 2092 CASA - 39078197"],"award-info":[{"award-number":["EXC 2092 CASA - 39078197"]}]},{"name":"German Federal Ministry of Education and Research","award":["16KIS1038, 16KIS1044"],"award-info":[{"award-number":["16KIS1038, 16KIS1044"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2024,3,31]]},"abstract":"<jats:p>With the development of large-scale quantum computers, the current landscape of asymmetric cryptographic algorithms will change dramatically. Today\u2019s standards like RSA, DSA, and ElGamal will no longer provide sufficient security against quantum attackers and need to be replaced with novel algorithms. In the face of these developments, NIST has already started a standardization process for new Key Encapsulation Mechanisms (KEMs) and Digital Signatures (DSs). Moreover, NIST has recommended the two stateful Hash-Based Signatures (HBSs) schemes XMSS and LMS for use in devices with a long expected lifetime and limited capabilities for maintenance. Both schemes are also standardized by the IETF.<\/jats:p>\n          <jats:p>In this work, we present the first agile hardware implementation that supports both LMS and XMSS. Our design can instantiate either LMS, XMSS, or both schemes using a simple configuration setting. Leveraging the vast similarities of the two schemes, the hardware utilization of the agile design increases by 20% in LUTs and only 3% in Flip Flops (FFs) over a standalone XMSS implementation. Furthermore, our approach can easily be configured with an arbitrary number of hash cores and accelerators for the one-time signatures for different application scenarios. We evaluate our implementation on the Xilinx Artix-7 FPGA platform, which is the recommended target for PQC implementations by NIST. We explore potential tradeoffs in the design space and compare our results to previous work in this field.<\/jats:p>","DOI":"10.1145\/3567426","type":"journal-article","created":{"date-parts":[[2022,10,11]],"date-time":"2022-10-11T12:05:24Z","timestamp":1665489924000},"page":"1-29","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["Agile Acceleration of Stateful Hash-based Signatures in Hardware"],"prefix":"10.1145","volume":"23","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1613-732X","authenticated-orcid":false,"given":"Jan Philipp","family":"Thoma","sequence":"first","affiliation":[{"name":"Ruhr-University Bochum, Bochum, NRW, Germany, and DFKI GmbH, Bremen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6773-2968","authenticated-orcid":false,"given":"Darius","family":"Hartlief","sequence":"additional","affiliation":[{"name":"Ruhr-University Bochum, Bochum, NRW, Germany, and DFKI GmbH, Bremen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3293-4989","authenticated-orcid":false,"given":"Tim","family":"G\u00fcneysu","sequence":"additional","affiliation":[{"name":"Ruhr-University Bochum, Bochum, NRW, Germany, and DFKI GmbH, Bremen, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,3,27]]},"reference":[{"key":"e_1_3_2_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/DSD51259.2020.00046"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1038\/s41586-019-1666-5"},{"key":"e_1_3_2_4_2","unstructured":"J.-P. Aumasson D. J. Bernstein C. Dobraunig M. Eichlseder S. Fluhrer S.-L. Gazdag A. H\u00fclsing P. Kampanakis S. K\u00f6lbl T. Lange M. M. Lauridsen F. Mendel R. Niederhagen C. Rechberger J. Rijneveld and P. Schwabe. 2019. SPHINCS+-Submission to the 2nd round of the NIST post-quantum project. NIST PQC Round 2 (2019)."},{"issue":"4","key":"e_1_3_2_5_2","article-title":"CRYSTALS-Kyber algorithm specifications and supporting documentation","volume":"2","author":"Avanzi Roberto","year":"2019","unstructured":"Roberto Avanzi, Joppe Bos, L\u00e9o Ducas, Eike Kiltz, Tancr\u00e8de Lepoint, Vadim Lyubashevsky, John M. Schanck, Peter Schwabe, Gregor Seiler, and Damien Stehl\u00e9. 2019. CRYSTALS-Kyber algorithm specifications and supporting documentation. NIST PQC Round 2, 4 (2019).","journal-title":"NIST PQC Round"},{"key":"e_1_3_2_6_2","doi-asserted-by":"crossref","unstructured":"Utsav Banerjee Tenzin S. Ukyab and Anantha P. Chandrakasan. 2019. Sapphire: A configurable crypto-processor for post-quantum lattice-based protocols. IACR Trans. Cryptogr. Hardw. Embed. Syst. 2019 4 (2019) 17\u201361.","DOI":"10.46586\/tches.v2019.i4.17-61"},{"key":"e_1_3_2_7_2","article-title":"Classic McEliece: Conservative code-based cryptography","author":"Albrecht M. R.","year":"2017","unstructured":"M. R. Albrecht, D. J. Bernstein, T. Chou, C. Cid, J. Gilcher, T. Lange, V. Maram, I. von Maurich, R. Misoczki, R. Niederhagen, K. G. Paterson, E. Persichetti, C. Peters, P. Schwabe, N. Sendrier, J. Szefer, C. J. Tjhai, M. Tomlinson, and W. Wang. 2017. Classic McEliece: Conservative code-based cryptography. NIST PQC Round 1 (2017).","journal-title":"NIST PQC Round"},{"key":"e_1_3_2_8_2","first-page":"214","article-title":"Breaking rainbow takes a weekend on a laptop","author":"Beullens Ward","year":"2022","unstructured":"Ward Beullens. 2022. Breaking rainbow takes a weekend on a laptop. IACR Cryptol. ePrint Arch. (2022), 214. https:\/\/eprint.iacr.org\/2022\/214.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_9_2","volume-title":"Advances in Cryptology (CRYPTO\u201997), 17th Annual International Cryptology Conference, Santa Barbara, California, USA, August 17-21, 1997, Proceedings (1997),","author":"Biham Eli","year":"1997","unstructured":"Eli Biham and Adi Shamir. 1997. Differential fault analysis of secret key cryptosystems. In Advances in Cryptology (CRYPTO\u201997), 17th Annual International Cryptology Conference, Santa Barbara, California, USA, August 17-21, 1997, Proceedings (1997), B. S. K. Jr. (Ed.). Vol. 1294 of Lecture Notes in Computer Science, Springer, 513\u2013525."},{"key":"e_1_3_2_10_2","doi-asserted-by":"crossref","first-page":"117","DOI":"10.1007\/978-3-642-25405-5_8","volume-title":"International Workshop on Post-quantum Cryptography","author":"Buchmann Johannes","year":"2011","unstructured":"Johannes Buchmann, Erik Dahmen, and Andreas H\u00fclsing. 2011. XMSS - A practical forward secure signature scheme based on minimal security assumptions. In International Workshop on Post-quantum Cryptography. Springer, 117\u2013129."},{"key":"e_1_3_2_11_2","doi-asserted-by":"crossref","first-page":"63","DOI":"10.1007\/978-3-540-88403-3_5","volume-title":"International Workshop on Post-quantum Cryptography","author":"Buchmann Johannes","year":"2008","unstructured":"Johannes Buchmann, Erik Dahmen, and Michael Schneider. 2008. Merkle tree traversal revisited. In International Workshop on Post-quantum Cryptography. Springer, 63\u201378."},{"key":"e_1_3_2_12_2","first-page":"470","article-title":"LMS vs XMSS: Comparison of stateful hash-based signature schemes on ARM Cortex-M4.","volume":"2020","author":"Campos Fabio","year":"2020","unstructured":"Fabio Campos, Tim Kohlstadt, Steffen Reith, and Marc St\u00f6ttinger. 2020. LMS vs XMSS: Comparison of stateful hash-based signature schemes on ARM Cortex-M4. IACR Cryptol. ePrint Arch. 2020 (2020), 470.","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSI.2021.3115786"},{"key":"e_1_3_2_14_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-79063-3_8"},{"key":"e_1_3_2_15_2","article-title":"Algorithm Specifications and Supporting Documentation","author":"Chen Cong","year":"2019","unstructured":"Cong Chen, Oussama Danba, Jeffrey Hoffstein, Andreas H\u00fclsing, Joost Rijneveld, John M. Schanck, Peter Schwabe, William Whyte, and Zhenfei Zhang. 2019. Algorithm Specifications and Supporting Documentation. Brown University and Onboard Security Company, Wilmington USA.","journal-title":"Brown University and Onboard Security Company, Wilmington USA"},{"key":"e_1_3_2_16_2","first-page":"208","article-title":"Recommendation for stateful hash-based signature schemes","volume":"800","author":"Cooper David A.","year":"2020","unstructured":"David A. Cooper, Daniel C. Apon, Quynh H. Dang, Michael S. Davidson, Morris J. Dworkin, and Carl A. Miller. 2020. Recommendation for stateful hash-based signature schemes. NIST Special Publication 800 (2020), 208.","journal-title":"NIST Special Publication"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1007\/11496137_12"},{"key":"e_1_3_2_18_2","article-title":"CRYSTALS-Dilithium: Algorithm specifications and supporting documentation","author":"Ducas L\u00e9o","year":"2019","unstructured":"L\u00e9o Ducas, Eike Kiltz, Tancr\u00e8de Lepoint, Vadim Lyubashevsky, Peter Schwabe, Gregor Seiler, and Damien Stehl\u00e9. 2019. CRYSTALS-Dilithium: Algorithm specifications and supporting documentation. NIST PQC Round 2 (2019).","journal-title":"NIST PQC Round"},{"key":"e_1_3_2_19_2","unstructured":"L\u00e9o Ducas Tancrede Lepoint Vadim Lyubashevsky Peter Schwabe Gregor Seiler and Damien Stehl\u00e9. 2017. Crystals-Dilithium: Digital signatures from module lattices. IACR Cryptol. ePrint Arch. 633 (2017)."},{"key":"e_1_3_2_20_2","doi-asserted-by":"crossref","unstructured":"E. Eaton. 2017. Leighton-Micali hash-based signatures in the quantum random-oracle model. In Selected Areas in Cryptography - SAC\u201917-24th International Conference Ottawa ON Canada August 16-18 2017 Revised Selected Papers (2017) C. Adams and J. Camenisch (Eds.). Vol. 10719 of Lecture Notes in Computer Science Springer 263\u2013280.","DOI":"10.1007\/978-3-319-72565-9_13"},{"key":"e_1_3_2_21_2","article-title":"Stateful hash-based signatures - public comments on draft SP 800-208","author":"QSC ETSI TC CYBER WG","year":"2020","unstructured":"ETSI TC CYBER WG QSC. 2020. Stateful hash-based signatures - public comments on draft SP 800-208. NIST (2020).","journal-title":"NIST"},{"key":"e_1_3_2_22_2","first-page":"1","volume-title":"2018 International Conference on ReConFigurable Computing and FPGAs (ReConFig\u201918)","author":"Ferozpuri Ahmed","year":"2018","unstructured":"Ahmed Ferozpuri and Kris Gaj. 2018. High-speed FPGA implementation of the NIST round 1 rainbow signature scheme. In 2018 International Conference on ReConFigurable Computing and FPGAs (ReConFig\u201918). IEEE, 1\u20138."},{"key":"e_1_3_2_23_2","article-title":"Falcon: Fast-fourier lattice-based compact signatures over NTRU","author":"Fouque Pierre-Alain","year":"2018","unstructured":"Pierre-Alain Fouque, Jeffrey Hoffstein, Paul Kirchner, Vadim Lyubashevsky, Thomas Pornin, Thomas Prest, Thomas Ricosset, Gregor Seiler, William Whyte, and Zhenfei Zhang. 2018. Falcon: Fast-fourier lattice-based compact signatures over NTRU. Submission to the NIST\u2019s PQC Standardization Process (2018).","journal-title":"Submission to the NIST\u2019s PQC Standardization Process"},{"key":"e_1_3_2_24_2","doi-asserted-by":"publisher","DOI":"10.1145\/237814.237866"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-38553-7_10"},{"key":"e_1_3_2_26_2","first-page":"1","article-title":"XMSS: eXtended Merkle signature scheme","volume":"8391","author":"H\u00fclsing Andreas","year":"2018","unstructured":"Andreas H\u00fclsing, Denis Butin, Stefan Gazdag, Joost Rijneveld, and Aziz Mohaisen. 2018. XMSS: eXtended Merkle signature scheme. Internet Research Task Force (IRTF), RFC 8391 (2018), 1\u201374.","journal-title":"Internet Research Task Force (IRTF), RFC"},{"key":"e_1_3_2_27_2","first-page":"314","volume-title":"Cryptographers\u2019 Track at the RSA Conference","author":"Jakobsson Markus","year":"2003","unstructured":"Markus Jakobsson, Tom Leighton, Silvio Micali, and Michael Szydlo. 2003. Fractal Merkle tree representation and traversal. In Cryptographers\u2019 Track at the RSA Conference. Springer, 314\u2013326."},{"key":"e_1_3_2_28_2","unstructured":"D. Jao R. Azarderakhsh M. Campagna C. Costello L. D. Feo B. Hess A. Hutchinson A. Jalali K. Karabina B. Koziel B. LaMacchia P. Longa M. Naehrig G. Pereira J. Renes V. Soukharev and D. Urbanik. 2019. SIKE: Supersingular isogeny key encapsulation. NIST PQC Round 2 (2019)."},{"key":"e_1_3_2_29_2","article-title":"LMS vs XMSS: Comparion of two hash-based signature standards","author":"Kampanakis Panos","year":"2017","unstructured":"Panos Kampanakis and Scott Fluhrer. 2017. LMS vs XMSS: Comparion of two hash-based signature standards. IACR Cryptology ePrint Archive: Report 2017\/349 (2017).","journal-title":"IACR Cryptology ePrint Archive: Report 2017\/349"},{"key":"e_1_3_2_30_2","doi-asserted-by":"crossref","first-page":"168","DOI":"10.1007\/978-3-319-89641-0_10","volume-title":"International Workshop on Constructive Side-channel Analysis and Secure Design","author":"Kannwischer Matthias J.","year":"2018","unstructured":"Matthias J. Kannwischer, Aymeric Gen\u00eat, Denis Butin, Juliane Kr\u00e4mer, and Johannes Buchmann. 2018. Differential power analysis of XMSS and SPHINCS. In International Workshop on Constructive Side-channel Analysis and Secure Design. Springer, 168\u2013188."},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-49100-4_12"},{"key":"e_1_3_2_32_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-68697-5_9"},{"key":"e_1_3_2_33_2","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48405-1_25"},{"key":"e_1_3_2_34_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-97348-3_12"},{"key":"e_1_3_2_35_2","article-title":"Leighton-Micali hash-based signatures","volume":"8544","author":"McGrew David","year":"2019","unstructured":"David McGrew, Michael Curcio, and Scott Fluhrer. 2019. Leighton-Micali hash-based signatures. Internet Research Task Force (IRTF), RFC 8544 (2019).","journal-title":"Internet Research Task Force (IRTF), RFC"},{"key":"e_1_3_2_36_2","first-page":"218","volume-title":"Conference on the Theory and Application of Cryptology","author":"Merkle Ralph C.","year":"1989","unstructured":"Ralph C. Merkle. 1989. A certified digital signature. In Conference on the Theory and Application of Cryptology. Springer, 218\u2013238."},{"key":"e_1_3_2_37_2","first-page":"656","volume-title":"2020 IEEE 38th International Conference on Computer Design (ICCD\u201920)","author":"Mohan Prashanth","year":"2020","unstructured":"Prashanth Mohan, Wen Wang, Bernhard Jungk, Ruben Niederhagen, Jakub Szefer, and Ken Mai. 2020. ASIC accelerator in 28 nm for the post-quantum digital signature scheme XMSS. In 2020 IEEE 38th International Conference on Computer Design (ICCD\u201920). IEEE, 656\u2013662."},{"key":"e_1_3_2_38_2","article-title":"Round 2 of NIST PQC competition","author":"Moody Dustin","year":"2019","unstructured":"Dustin Moody. 2019. Round 2 of NIST PQC competition. PQCrypto (2019).","journal-title":"PQCrypto"},{"key":"e_1_3_2_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICFPT47387.2019.00070"},{"key":"e_1_3_2_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC.2018.8538642"},{"key":"e_1_3_2_41_2","unstructured":"QuantumRISC. 2020. QuantumRISC \u2014 Next Generation Cryptography for Embedded Systems. https:\/\/www.quantumrisc.org\/."},{"key":"e_1_3_2_42_2","doi-asserted-by":"publisher","DOI":"10.1137\/S0036144598347011"},{"key":"e_1_3_2_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/ISCAS51556.2021.9401177"},{"key":"e_1_3_2_44_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24676-3_32"},{"key":"e_1_3_2_45_2","article-title":"A configurable hardware implementation of XMSS","author":"Thoma Jan Philipp","year":"2021","unstructured":"Jan Philipp Thoma and Tim G\u00fcneysu. 2021. A configurable hardware implementation of XMSS. Cryptology ePrint Archive (2021).","journal-title":"Cryptology ePrint Archive"},{"key":"e_1_3_2_46_2","unstructured":"Ir Frederik Vercauteren Sujoy Sinha Roy Jan-Pieter D\u2019Anvers and Angshuman Karmakar. [n.d.]. SABER: Mod-LWR based KEM."},{"key":"e_1_3_2_47_2","first-page":"523","volume-title":"International Conference on Selected Areas in Cryptography","author":"Wang Wen","year":"2019","unstructured":"Wen Wang, Bernhard Jungk, Julian W\u00e4lde, Shuwen Deng, Naina Gupta, Jakub Szefer, and Ruben Niederhagen. 2019. XMSS and embedded systems. In International Conference on Selected Areas in Cryptography. Springer, 523\u2013550."},{"key":"e_1_3_2_48_2","first-page":"112","volume-title":"The Book of Articles National Scientific Conference \u201cScience and Young Researchers\u201d IV edition","author":"Zujko Kacper","year":"2020","unstructured":"Kacper Zujko. 2020. Improving differential power analysis of XMSS. In The Book of Articles National Scientific Conference \u201cScience and Young Researchers\u201d IV edition. 112."}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3567426","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3567426","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T22:43:46Z","timestamp":1750286626000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3567426"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,3,27]]},"references-count":47,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2024,3,31]]}},"alternative-id":["10.1145\/3567426"],"URL":"https:\/\/doi.org\/10.1145\/3567426","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,3,27]]},"assertion":[{"value":"2022-05-08","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2022-10-02","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-03-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}