Filtering funnel
Each filter is applied in sequence. Bars show how many candidates survive each step. All costs are SHA-256 compression calls with the PK.seed block midstate-cached (FIPS 205 SHA-2 layout).
Candidate sieve
Each dot is one (h, d, k, a, w) tuple. Positions are random β the layout carries no meaning. Survivors are coloured by their weighted distance to the origin (blue = closer to ideal, red = farther). Filtered-out candidates fade to grey. The winner is ringed.
Best candidate (minimum weighted distance)
Compare your own candidate
Enter any (h, d, k, a, w) tuple to see how it stacks up against SLH-DSA-128s. w covers the SLH-DSA-compatible choices {2, 4, 16, 256}, plus the optional extras 32 and 64. This panel always evaluates the plain SPX model (WOTS-TW + FORS), regardless of the scheme selected above.