Introduction
BiT is a lattice-based digital signature scheme built on the Fiat–Shamir with Aborts paradigm. It combines triangular masking with a bimodal structure to simplify sampling and reduce rejection, using only integer arithmetic.
- 01
Triangular masking
Masking values are sampled as the difference of two uniform integers, avoiding Gaussian sampling and floating-point arithmetic.
- 02
Bimodal rejection
A triangular source and a trapezoidal target distribution shape the rejection-sampling procedure.
- 03
Compact representation
Public-key compression and signature hints reduce the amount of data that needs to be transmitted.