Introduction

Phoenix is a stateless hash-based digital signature scheme built on the SPHINCS+ hypertree framework. It combines generalized WOTS+C (GWOTS+C) and transposed FORS (TFORS) to reduce signature size, with fast and small parameter variants using SHAKE or SM3.

Specification & software

All resources →

Parameters

Classical security targets are given in bits; key and signature sizes are given in bytes. Signature sizes reproduce the specification's reference measurements and may differ from the supplied code; signatures have variable length and these values are not buffer-size bounds. The suffixes s and f denote small and fast variants.