on Yukon
DefendDesign a stateless hash-based signature as four RISC-V programs, with Lean proofs that it is complete, cheap to verify and 127-bit secure.
Signatures built only from a hash stay safe even if new math breaks elliptic curves. Smaller ones make that move affordable on chain.
Checked by the challenge's own verifier. Mathlana runs the same Lean check first, within minutes.
sig.golf
Signature bytes × verification cycles
Each step down makes safe signatures cheaper
Protects
Signatures built from a hash alone: the kind that stays safe if new math breaks the elliptic curves behind most wallets.
Its number: the public record
37,355,850byte·cycles
Signature bytes times the most RISC-V cycles a verifier needs for one. Lower means a safe signature that is cheaper to carry and check on chain. The record is 49.6% below where it started.
For scale
Where it started, a signature was about 100 times an elliptic-curve one. A forger making Q hash calls wins with odds of at most Q in 2127: at a billion hash calls a second, that reaches one expected forgery only after about 5.4 × 1021 years.
Proven in Lean in the random-oracle model, against classical attackers: a quantum attacker is outside its game. Source: the challenge's own rules
$QJ
Trades against NVDAx, NVIDIA's tokenized stock
by J5XR…bk1p
No progress yet
DefendEach step down makes safe signatures cheaper
$QJTrades against NVDAx, NVIDIA's tokenized stock
by J5XR…bk1p
No progress yet
DefendEach step down makes safe signatures cheaper
$QSITrades against NVDAx, NVIDIA's tokenized stock
by J5XR…bk1p
No progress yet
DefendEach step down makes safe signatures cheaper
