Thank you for your work. That is really helpful to see such comparisons.

Best,
Mike

On Sun, Jan 25, 2026 at 8:11 PM 'conduition' via Bitcoin Development
Mailing List <[email protected]> wrote:

> Hi List,
>
> In follow up to my previous thread
> <https://groups.google.com/g/bitcoindev/c/LAll07BHwjw> about SLH-DSA
> performance optimization, I published a short new article directly
> comparing the signature verification throughput of my highly-parallelized
> SLH-DSA verification shader code against libsecp256k1, mostly to answer
> some questions I'd received from Ethan Heilman.
>
> https://conduition.io/code/fast-slh-dsa-verification/
>
> The results were very surprising to me. The benchmarks seem to show
> SLH-DSA can perform about as well under load as a naive single-threaded
> BIP340 schnorr signature verifier, if properly optimized.
>
> [image: scr.png]
>
> If the BIP340 verifier is parallelized as well, SLH-DSA compares much less
> favorably, but still within a single order of magnitude.
>
> Bear in mind I only benchmarked a single (slower) SLH-DSA parameter set,
> and I used the NIST FIPS-205 algorithm, without any aftermarket add-ons
> like WOTS+C or FORS+C which would've sped up verification even more (see
> Jonas and Mikhail's paper, ref this thread
> <https://groups.google.com/g/bitcoindev/c/gOfL5ag_bDU>). I also did not
> benchmark BIP340 batch verification as I have seen its effects are mild
> compared to parallelism
> <https://blog.btrust.tech/schnorr-and-steady-wins-the-race-the-case-for-batch-validation/>
> .
>
> regards,
> conduition
>
>
>
>
>
> --
> You received this message because you are subscribed to the Google Groups
> "Bitcoin Development Mailing List" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion visit
> https://groups.google.com/d/msgid/bitcoindev/80f409f8-2ffd-453b-b133-d54d1dcc5b43n%40googlegroups.com
> <https://groups.google.com/d/msgid/bitcoindev/80f409f8-2ffd-453b-b133-d54d1dcc5b43n%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/d/msgid/bitcoindev/CAPcK4uQWpxVFKEmhRpGHmkYfGZKG9S2CVeJi62-HTDkvGfv8wg%40mail.gmail.com.
  • [bitcoindev] SLH-DS... 'conduition' via Bitcoin Development Mailing List
    • Re: [bitcoinde... 'Mikhail Kudinov' via Bitcoin Development Mailing List

Reply via email to