SQIsign, however, has higher signing and verification times.
[4] The original paper concluded that their C implementation takes 0.6 s for key generation, 2.5 s for a sign operation and 0.05 s or 50 ms for a verification operation.
[7][8] The authors also provide a rationale for the chosen parameters in the last chapter of the specification.
[1] While SQIsign makes use of a similar construction, the weaknesses of SIDH do not translate to it.
There are a couple of variants based on the original SQIsign:[9]