How HPPK DS Balances Security and Efficiency Across NIST Levels

The article analyzes the HPPK DS digital signature scheme, focusing on key recovery and signature forgery attacks, and presents its performance across three NIST security levels. With entropy values of 144–272 bits and remarkably small key and signature sizes, HPPK DS offers both robustness and efficiency. While the current study outlines attacks and complexity measures, future work will benchmark its performance against standardized algorithms.