Really short digital signatures

Hi,

Is there any reasonably common and safe method of generating digital signatures which are really short? By "short" I mean it would be ideal if it could be around 16 bytes and by "common" that it is already present in some open source library.

I know DSA has smaller signatures than RSA, but from what I've found it looks like it still needs at least 512-bit or 1024-bit signatures to be reasonably safe. Is using smaller DSA parameters the best I could do?
.

Relevant Pages

  • Re: Factoring large composite
    ... That's a complete factorisation. ... If I can find an appropriate q, I'll speedtest this as p for DSA ... signatures in the Baan programming language. ... with public exponent 3, which, although longest, will definitely be fast ...
    (sci.crypt)
  • Re: Question for the math wizards...
    ... > algo is about sqrt time and sqrt memory. ... The memory constraint would prevent ... If the guy wants fast small signatures ... might as well use DSA itself with proper parameters. ...
    (sci.crypt)
  • Re: Really short digital signatures
    ... I know DSA has smaller signatures than RSA, but from what I've found it looks like it still needs at least 512-bit or 1024-bit signatures to be reasonably safe. ... Is using smaller DSA parameters the best I could do? ...
    (sci.crypt)
  • Re: Really short digital signatures
    ... I know DSA has smaller signatures than RSA, but from what I've found it looks like it still needs at least 512-bit or 1024-bit signatures to be reasonably safe. ... Things based on multi-variate equations (biquadratic/etc) ...
    (sci.crypt)
  • Re: Really short digital signatures
    ... ivo asked: ... I know DSA has smaller signatures than RSA, but from what I've found it looks like it still needs at least 512-bit or 1024-bit signatures to be reasonably safe. ...
    (sci.crypt)