Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Cryptographic contract

This project implements a custom HashSigsRS WOTS+ construction with a typed profile boundary. The contract is smaller than an application signature system:

  • input is one 32-byte message digest;
  • a WOTS private key signs at most once;
  • the signature contains one value from each of 67 hash chains;
  • the public key contains a 32-byte public seed and a 32-byte hash of all chain endpoints;
  • profile identity is external metadata, not a byte embedded in the key.

The contract does not allocate one-time keys, authenticate a tree root, define an application prehash, or provide a many-time signature protocol.

Read WOTS+ in this project for the calculation, then two incompatible profiles before handling serialized values.