Post BARR2JI4JJYoc6KBDk by rfceditor@mastodon.online
(DIR) More posts by rfceditor@mastodon.online
(DIR) Post #BARR1z73KYri2916H2 by rfceditor@mastodon.online
0 likes, 0 repeats
RFC 10033: Hash-Based Signatures: State and Backup Management, T. Wiggers, et al., https://www.rfc-editor.org/info/rfc10033 #RFC Stateful Hash-Based Signature Schemes (Stateful HBS) such as Leighton-Micali Signature (LMS), Hierarchical Signature System (HSS), eXtended Merkle Signature Scheme (XMSS), and XMSS^MT combine Merkle trees with One-Time Signatures (OTSs) to provide signatures that 1/4
(DIR) Post #BARR2GYcTK188Z2r6O by rfceditor@mastodon.online
0 likes, 0 repeats
are resistant against attacks using large-scale quantum computers. Unlike conventional stateless digital signature schemes, Stateful HBS have a state to keep track of which OTS keys have been used, as double-signing with the same OTS key allows forgeries. This document provides guidance and catalogs security considerations for the operational and technical aspects of deploying systems that 2/4
(DIR) Post #BARR2I9sWHPn6PU7oe by rfceditor@mastodon.online
0 likes, 0 repeats
rely on Stateful HBS. Management of the state of the Stateful HBS, including any handling of redundant key material, is a sensitive topic. This document describes some approaches to handle the associated challenges. It also describes the challenges that need to be resolved before certain approaches should be considered. This document is a product of the Post-Quantum Use In Protocols Working 3/4
(DIR) Post #BARR2JI4JJYoc6KBDk by rfceditor@mastodon.online
0 likes, 0 repeats
Group of the IETF. 4/4