| Scheme | Key size | Signature size | Verification speed | Security level | |--------|----------|----------------|--------------------|----------------| | RSA-2048 | 256 B | 256 B | Slow | 112 bits | | ECDSA secp256k1 | 32 B | 64 B | Medium | 128 bits | | Ed25519 | 32 B | 64 B | Fastest | 128 bits |
| Operation | Time (ms) | Throughput (tokens/sec) | |-----------|-----------|--------------------------| | Generate 1 token | 0.24 | 4,166 | | Generate batch of 1000 | 186 | 5,376 | | Verify token (local) | 0.18 | 5,555 | | Verify + state check | 0.31 | 3,225 | | Blind sign (Chaum) | 1.2 | 833 | sfd token generator
Proof sketch: Reduces to existential unforgeability of Ed25519 under chosen message attack. Test environment: AWS c5.large (2 vCPU, 4 GB RAM) | Scheme | Key size | Signature size