Introduction

Rhyme is a lattice-based digital signature scheme following the Fiat-Shamir framework. It combines Convolution of Constant Count Sampling (3C Sampling), an extended unimodular construction, and entropy coding to reduce combined public-key and signature sizes.

Specification & software

SpecificationICCS · PDF
ImplementationsICCS · ZIP

All resources

Parameters

Classical security targets are given in bits; key and signature sizes are given in bytes. The table follows the ICCS specification and lists reported compressed signature sizes; actual signature lengths vary. Bandwidth is the combined size of the public key and signature. SHAKE and SM3 implementations are provided for all four parameter sets.

Rhyme instance sizes and security parameters
InstanceClassical
Security Target
Public KeyPrivate KeySignatureBandwidth
Rhyme-1281288001107214832283
Rhyme-25625618242233632585082
Rhyme-38438427204576047437463
Rhyme-512512387244864700210874