Verification cost86compressions
Think one-time signatures are easy? Prove it.
Build a hash-based OTS that is cheaper to verify, or prove that a lower cost is impossible.
Upper bound lower is better
Verification cost1088cycles
Verification cost310cycles
Lower bound higher is better
Whole-word DAGs
A DAG built from whole 128-bit words.
- Verification cost
- 90 compressions
By TomWambsgans
Progress over time
Latest progress
Leaderboard
Whole-word DAGs
1 record, 1 solver
90 compressions
| Solver | Date | ||
|---|---|---|---|
|
01
|
90 compressions | first record | 2026-09-19 |
By compressions
9 records, 4 solvers, 1 in verification
86 compressions
| Solver | Date | ||
|---|---|---|---|
|
01
|
86 compressions | -2 | 2026-09-30 |
|
02
|
88 compressions | -1 | 2026-09-27 |
|
03
|
89 compressions | -1 | 2026-09-27 |
|
04
|
90 compressions | -1 | 2026-09-27 |
|
05
|
91 compressions | -1 | 2026-09-21 |
|
06
|
92 compressions | -8 | 2026-09-20 |
|
07
|
100 compressions | -2 | 2026-09-20 |
|
08
|
102 compressions | -2 | 2026-09-20 |
|
09
|
104 compressions | first record | 2026-09-19 |
|
|
– | pending | 2026-10-11 |
By RISC-V cycles
25 records, 7 solvers
341 cycles
| Solver | Instructions | Embedded data | Date | ||
|---|---|---|---|---|---|
|
01
|
341 cycles | 15,616 | 88 B | -3 | 2026-09-28 |
|
02
|
344 cycles | – | – | -2 | 2026-09-28 |
|
03
|
346 cycles | – | – | -2 | 2026-09-27 |
|
04
|
348 cycles | 15,701 | 88 B | -1 | 2026-09-27 |
|
05
|
349 cycles | 15,701 | 88 B | -4 | 2026-09-24 |
|
06
|
353 cycles | 15,701 | 88 B | -5 | 2026-09-24 |
|
07
|
358 cycles | 15,703 | 88 B | -1 | 2026-09-24 |
|
08
|
359 cycles | 12,339 | 96 B | -1 | 2026-09-24 |
|
09
|
360 cycles | 12,340 | 104 B | -2 | 2026-09-23 |
|
10
|
362 cycles | 12,340 | 104 B | -2 | 2026-09-23 |
|
11
|
364 cycles | 12,340 | 104 B | -8 | 2026-09-23 |
|
12
|
372 cycles | 12,338 | 104 B | -5 | 2026-09-22 |
|
13
|
377 cycles | 15,412 | 104 B | -16 | 2026-09-22 |
|
14
|
393 cycles | 12,493 | 104 B | -1 | 2026-09-22 |
|
15
|
394 cycles | 12,494 | 104 B | -32 | 2026-09-21 |
|
16
|
426 cycles | 886 | 80 B | -10 | 2026-09-21 |
|
17
|
436 cycles | 896 | 80 B | -1 | 2026-09-20 |
|
18
|
437 cycles | 897 | 80 B | -1 | 2026-09-20 |
|
19
|
438 cycles | 898 | 80 B | -7 | 2026-09-20 |
|
20
|
445 cycles | 904 | 80 B | -242 | 2026-09-20 |
|
21
|
687 cycles | 1,331 | 72 B | -6 | 2026-09-20 |
|
22
|
693 cycles | 1,337 | 72 B | -1 | 2026-09-20 |
|
23
|
694 cycles | 1,338 | 64 B | -2 | 2026-09-20 |
|
24
|
696 cycles | 1,337 | 64 B | -6 | 2026-09-20 |
|
25
|
702 cycles | 1,337 | 64 B | first record | 2026-09-19 |
By leanISA cycles
19 records, 3 solvers
1088 cycles
| Solver | Instructions | Date | ||
|---|---|---|---|---|
|
01
|
1088 cycles | – | -7 | 2026-09-30 |
|
02
|
1095 cycles | 262,144 | -1 | 2026-09-28 |
|
03
|
1096 cycles | 262,144 | -19 | 2026-09-28 |
|
04
|
1115 cycles | – | -10 | 2026-09-27 |
|
05
|
1125 cycles | – | -1 | 2026-09-27 |
|
06
|
1126 cycles | – | -12 | 2026-09-27 |
|
07
|
1138 cycles | – | -11 | 2026-09-26 |
|
08
|
1149 cycles | – | -60 | 2026-09-26 |
|
09
|
1209 cycles | 262,144 | -72 | 2026-09-25 |
|
10
|
1281 cycles | 262,144 | -109 | 2026-09-25 |
|
11
|
1390 cycles | 262,144 | -32 | 2026-09-24 |
|
12
|
1422 cycles | 262,144 | -11 | 2026-09-24 |
|
13
|
1433 cycles | 262,144 | -6 | 2026-09-24 |
|
14
|
1439 cycles | 262,144 | -159 | 2026-09-24 |
|
15
|
1598 cycles | 262,144 | -32245 | 2026-09-24 |
|
16
|
33843 cycles | 65,536 | -15492 | 2026-09-24 |
|
17
|
49335 cycles | 65,536 | -36008 | 2026-09-24 |
|
18
|
85343 cycles | 131,072 | -85206 | 2026-09-24 |
|
19
|
170549 cycles | 131,072 | first record | 2026-09-23 |
By hinted RISC-V cycles
8 records, 3 solvers
310 cycles
| Solver | Instructions | Embedded data | Date | ||
|---|---|---|---|---|---|
|
01
|
310 cycles | – | – | -5 | 2026-09-30 |
|
02
|
315 cycles | – | – | -1 | 2026-09-28 |
|
03
|
316 cycles | – | – | -1 | 2026-09-28 |
|
04
|
317 cycles | 15,750 | 64 B | -3 | 2026-09-28 |
|
05
|
320 cycles | 15,751 | 64 B | -1 | 2026-09-27 |
|
06
|
321 cycles | 15,752 | 64 B | -3 | 2026-09-27 |
|
07
|
324 cycles | 15,697 | 64 B | -25 | 2026-09-27 |
|
08
|
349 cycles | 15,701 | 88 B | first record | 2026-09-25 |