{"id":"https://openalex.org/W2806487405","doi":"https://doi.org/10.17487/rfc8391","title":"XMSS: eXtended Merkle Signature Scheme","display_name":"XMSS: eXtended Merkle Signature Scheme","publication_year":2018,"publication_date":"2018-05-01","ids":{"openalex":"https://openalex.org/W2806487405","doi":"https://doi.org/10.17487/rfc8391","mag":"2806487405"},"language":"en","primary_location":{"id":"doi:10.17487/rfc8391","doi":"https://doi.org/10.17487/rfc8391","is_oa":false,"landing_page_url":"https://doi.org/10.17487/rfc8391","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"report"},"volume":null,"type":"report","is_traditional":false,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065527777","display_name":"Andreas H\u00fclsing","orcid":"https://orcid.org/0000-0003-2215-4134","observed_orcids":["https://orcid.org/0000-0003-2215-4134"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"A. Huelsing","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038494331","display_name":"Denis Butin","orcid":"https://orcid.org/0000-0002-7461-1918","observed_orcids":["https://orcid.org/0000-0002-7461-1918"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"D. Butin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5027006769","display_name":"Stefan-Lukas Gazdag","orcid":"https://orcid.org/0009-0002-1338-9484","observed_orcids":["https://orcid.org/0009-0002-1338-9484"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"S. Gazdag","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5077305354","display_name":"Joost Rijneveld","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"J. Rijneveld","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5077402873","display_name":"Aziz Mohaisen","orcid":"https://orcid.org/0000-0003-3227-2505","observed_orcids":["https://orcid.org/0000-0003-3227-2505"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"A. Mohaisen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":235,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9560999870300293,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.026000000536441803,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.006099999882280827,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/xmss","display_name":"XMSS","score":0.9700000286102295},{"id":"https://openalex.org/keywords/hash-based-digital-signatures","display_name":"hash-based digital signatures","score":0.9150000214576721},{"id":"https://openalex.org/keywords/one-time-signatures","display_name":"one-time signatures","score":0.8659999966621399},{"id":"https://openalex.org/keywords/post-quantum-cryptography","display_name":"post-quantum cryptography","score":0.7940000295639038},{"id":"https://openalex.org/keywords/collision-resistance","display_name":"collision resistance","score":0.6359999775886536},{"id":"https://openalex.org/keywords/side-channel-resistance","display_name":"side-channel attack resistance","score":0.7850000262260437},{"id":"https://openalex.org/keywords/hash-function-security","display_name":"hash function security","score":0.36500000953674316}],"concepts":[{"id":"https://openalex.org/C40404285","wikidata":"https://www.wikidata.org/wiki/Q1921816","display_name":"Merkle signature scheme","level":5,"score":0.781724214553833},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.7658400535583496},{"id":"https://openalex.org/C205383636","wikidata":"https://www.wikidata.org/wiki/Q14746","display_name":"Merkle tree","level":4,"score":0.7172954678535461},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.7143784761428833},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6529216170310974},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.6433150768280029},{"id":"https://openalex.org/C150909736","wikidata":"https://www.wikidata.org/wiki/Q1779448","display_name":"Collision resistance","level":5,"score":0.5947715044021606},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5186640024185181},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.5120630860328674},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.49513617157936096},{"id":"https://openalex.org/C132860680","wikidata":"https://www.wikidata.org/wiki/Q1328731","display_name":"ElGamal signature scheme","level":5,"score":0.48913195729255676},{"id":"https://openalex.org/C168941894","wikidata":"https://www.wikidata.org/wiki/Q3483645","display_name":"Ring signature","level":4,"score":0.4725109040737152},{"id":"https://openalex.org/C202424057","wikidata":"https://www.wikidata.org/wiki/Q1224829","display_name":"Digital Signature Algorithm","level":4,"score":0.4712693393230438},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.4122486710548401},{"id":"https://openalex.org/C18899389","wikidata":"https://www.wikidata.org/wiki/Q2736593","display_name":"Blind signature","level":4,"score":0.3144901692867279},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.303733229637146},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.2659761905670166},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.2604339122772217},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2301105260848999},{"id":"https://openalex.org/C138111711","wikidata":"https://www.wikidata.org/wiki/Q478351","display_name":"Double hashing","level":4,"score":0.17066994309425354},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.17487/rfc8391","doi":"https://doi.org/10.17487/rfc8391","is_oa":false,"landing_page_url":"https://doi.org/10.17487/rfc8391","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":null,"raw_type":"report"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2479669449","https://openalex.org/W1747618102","https://openalex.org/W1600113341","https://openalex.org/W1729433440","https://openalex.org/W7099832897","https://openalex.org/W2478532676","https://openalex.org/W6922767078","https://openalex.org/W2943740952","https://openalex.org/W2809472865","https://openalex.org/W7223102242"],"abstract_inverted_index":{"This":[0],"note":[1,20],"describes":[2],"the":[3,22,64,82],"eXtended":[4],"Merkle":[5],"Signature":[6],"Scheme":[7],"(XMSS),":[8],"a\nhash-based":[9],"digital":[10,46],"signature":[11],"system.":[12],"It":[13,88],"follows":[14],"existing":[15],"descriptions\nin":[16],"scientific":[17],"literature.":[18],"The":[19],"specifies":[21],"WOTS+":[23,38],"one-time\nsignature":[24],"scheme,":[25],"a":[26,30,40],"single-tree":[27],"(XMSS)":[28],"and":[29,74],"multi-tree":[31],"variant\n(XMSS^MT)":[32],"of":[33,53,66,81],"XMSS.":[34],"Both":[35],"variants":[36],"use":[37],"as":[39],"main":[41],"building":[42],"block.\nXMSS":[43],"provides":[44,70],"cryptographic":[45,67],"signatures":[47,106],"without":[48],"relying":[49],"on":[50,63],"the\nconjectured":[51],"hardness":[52],"mathematical":[54],"problems.":[55],"Instead,":[56],"it":[57,60],"is":[58,75,86],"proven\nthat":[59],"only":[61],"relies":[62],"properties":[65],"hash":[68,84],"functions.\nXMSS":[69],"strong":[71],"security":[72],"guarantees":[73],"even":[76],"secure":[77],"when":[78],"the\ncollision":[79],"resistance":[80],"underlying":[83],"function":[85],"broken.":[87],"is\nsuitable":[89],"for":[90],"compact":[91],"implementations,":[92],"relatively":[93],"simple":[94],"to":[95],"implement,\nand":[96],"naturally":[97],"resists":[98],"side-channel":[99],"attacks.":[100],"Unlike":[101],"most":[102],"other\nsignature":[103],"systems,":[104],"hash-based":[105],"can":[107],"withstand":[108],"so":[109],"far":[110],"known\nattacks":[111],"using":[112],"quantum":[113],"computers.":[114]},"counts_by_year":[{"year":2026,"cited_by_count":43},{"year":2025,"cited_by_count":41},{"year":2024,"cited_by_count":30},{"year":2023,"cited_by_count":28},{"year":2022,"cited_by_count":25},{"year":2021,"cited_by_count":27},{"year":2020,"cited_by_count":19},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":7},{"year":2016,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2018-06-13T00:00:00"}