Squirrel Aggregates 4096 Lattice Signatures in 68 Milliseconds

Squirrel, a lattice-based multi-signature scheme for synchronized settings, aggregates up to 4096 signatures per time step over 2^24 steps. At τ=24 and ρ=4096, signing takes 68 ms, verification 36 ms; public key 1 KB, signatures 52 KB, aggregated 771 KB. Secure against rogue-key attacks in the random oracle model.