Filtering funnel
Each filter is applied in sequence. Bars show how many candidates survive each step. All costs are SHA-256 compression calls with the PK.seed block midstate-cached (FIPS 205 SHA-2 layout).
Candidate sieve
Each dot is one (h, d, k, a, w) tuple. Positions are random — the layout carries no meaning. Survivors are coloured by their weighted distance to the origin (blue = closer to ideal, red = farther). Filtered-out candidates fade to grey. The winner is ringed.
Best candidate (minimum weighted distance)
Compare your own candidate
Enter any (h, d, k, a, w) tuple to see how it stacks up against SLH-DSA-128s. This panel always evaluates the plain SPX model (WOTS-TW + FORS), regardless of the scheme selected above.