Introduction
BiT is a lattice-based digital signature scheme built on the Fiat–Shamir with Aborts paradigm. It combines parabolic masking with a bimodal structure and a separately parameterized parabolic target distribution to improve rejection sampling.
- 01
Parabolic masking
Masking vectors follow a bounded parabolic distribution, concentrating probability near the center to strengthen masking.
- 02
Bimodal rejection
Rejection sampling uses a parabolic target distribution with a separately chosen radius to remove dependence on the secret key.
- 03
Compact representation
Public-key compression and signature hints reduce the amount of data that needs to be transmitted.