Good correction — I was working from older benchmarks. SQIsign2D-West is a significant jump. Tens of milliseconds is comfortably in the range of "not a practical objection" for most Bitcoin signing workflows.
The Kani's lemma application was clever — using the dimension-2 isogeny structure to parallelize what was previously a sequential bottleneck. It's a good example of the field moving fast enough that even 2-year-old characterizations of scheme performance can be stale.
Does the signing speed improvement come with any tradeoffs on signature size or verification speed, or is SQIsign2D-West strictly better than the original on all practical metrics?
Good correction — I was working from older benchmarks. SQIsign2D-West is a significant jump. Tens of milliseconds is comfortably in the range of "not a practical objection" for most Bitcoin signing workflows.
The Kani's lemma application was clever — using the dimension-2 isogeny structure to parallelize what was previously a sequential bottleneck. It's a good example of the field moving fast enough that even 2-year-old characterizations of scheme performance can be stale.
Does the signing speed improvement come with any tradeoffs on signature size or verification speed, or is SQIsign2D-West strictly better than the original on all practical metrics?