Falcon-512 Interactive Demo

Loading WebAssembly module...

ℹ️ About this demo: Enter a seed string to generate deterministic keypairs. Signing uses a deterministic RNG seed (all zeros), so the same keypair and message always produce the same signature. The Hash-to-Point shows the challenge point c = hash(nonce + message) that Falcon verification actually checks. All data is in Python-ready format with copy buttons.

1️⃣ Input Parameters

Seed String (will be hashed to 48 bytes):

Message to Sign:

🔐 Falcon-512 Interactive Demo

1️⃣ Input Parameters

2️⃣ Generated Keypair

Private Key (Base64):

Public Key (Base64):

3️⃣ Public Key Coefficients (512 elements, mod 12289)

Python List:

4️⃣ Generated Signature

RNG Seed for Signing (Deterministic - all zeros):

Signature (Base64):

5️⃣ Signature Coefficients (s0 and s1)

s0 Coefficients (512 elements):

s1 Coefficients (512 elements):

6️⃣ Hash-to-Point for Verification (nonce + message → 512 coefficients)

Nonce (extracted from signature, 40 bytes):

Challenge Point c = hash(nonce + message) - Python List:

🔐 Falcon-512 Interactive Demo

1️⃣ Input Parameters

2️⃣ Generated Keypair

Private Key (Base64): 📋 Copy

Public Key (Base64): 📋 Copy

3️⃣ Public Key Coefficients (512 elements, mod 12289)

Python List: 📋 Copy

4️⃣ Generated Signature

RNG Seed for Signing (Deterministic - all zeros): 📋 Copy

Signature (Base64): 📋 Copy

5️⃣ Signature Coefficients (s0 and s1)

s0 Coefficients (512 elements): 📋 Copy

s1 Coefficients (512 elements): 📋 Copy

6️⃣ Hash-to-Point for Verification (nonce + message → 512 coefficients)

Nonce (extracted from signature, 40 bytes): 📋 Copy

Challenge Point c = hash(nonce + message) - Python List: 📋 Copy

Private Key (Base64):

Public Key (Base64):

Python List:

RNG Seed for Signing (Deterministic - all zeros):

Signature (Base64):

s0 Coefficients (512 elements):

s1 Coefficients (512 elements):

Nonce (extracted from signature, 40 bytes):

Challenge Point c = hash(nonce + message) - Python List: