ImperialViolet

I wrote a Rabin-Williams signature scheme [source]:

• Verification speeds 4x RSA (on a Core2 2.33GHz, at least)
• Signatures are half the size of RSA for the same security
• A hash generic attach is provably as hard as factoring