Parameters and byte sizes
| Name | Value | Meaning |
|---|---|---|
HASH_BYTES | 32 | Hash output and WOTS security parameter n |
WINTERNITZ_W | 16 | Number of positions in one chain |
CHAIN_STEPS | 15 | Maximum transitions per chain |
MESSAGE_DIGITS | 64 | Base-16 digits in a 256-bit message |
CHECKSUM_DIGITS | 3 | Base-16 checksum digits |
CHAIN_COUNT | 67 | Total signature chains |
MASK_COUNT | 16 | Reachable upstream mask indices 0 through 15 |
SIGNATURE_BYTES | 2,144 | 67 × 32-byte chain values |
PUBLIC_KEY_BYTES | 64 | Public seed and endpoint hash |
FUSED_OUTPUT_BYTES | 2,208 | Signature plus public key |
| Signer output beats | 35 | 512-bit transfers, partial final keep |
| Verifier input bytes | 2,240 | Signature, public key, and message digest |
| Verifier input beats | 35 | 512-bit transfers, all lanes valid |
| SHA signer blocks | 1,258 | Fixed fused private-seed work |
| Active clusters | 3 | Signer and verifier |
| Contexts per cluster | 4 | One lane shared locally |
| Active contexts | 12 | Three clusters × four contexts |
| SHA lane latency | 64 cycles | Exact tag-preserving compression latency |
These constants describe authored protocol and source geometry. LUTs, registers, DSPs, RAM, frequency, and physical latency come from higher evidence tiers.