#KEYMASTER | Stateless PQC Digital Signatures: Insights into ML-DSA & SLH-DSA

In this #KEYMASTER episode, Keyfactor's David Hook, VP of Software Engineering for Bouncy Castle, and Sven Rajala, Senior Solutions Engineer, PKI SME, discuss the complexities of stateless post-quantum cryptographic (PQC) digital signatures.

They start by exploring what it means for a signature algorithm to be “stateless,” contrasting it with earlier stateful algorithms like XMSS and LMS. The conversation then dives into the two stateless NIST standard algorithms, ML-DSA (Modular Lattice Digital Signature Algorithm) and SLH-DSA (Stateless Hash-Based Digital Signature Algorithm), discussing the difference between their pure and hash-based variants, their internal structures, and practical implementation considerations.

A major highlight is the discussion on the external MU calculation option for ML-DSA, a critical workaround for constrained environments like HSMs, where message sizes might be too large to handle directly. Unfortunately, SLH-DSA lacks a similar mechanism, making its usage more limited in such contexts unless a pre-hash variant is used. The episode ends with reflections on practical implications for systems like CMS and CRLs.

💡 Summary

For a written summary with detailed explanations and links, see the Tech Update: https://www.ejbca.org/resources/keymaster-stateless-pqc-digital-signatures-insights-into-ml-dsa-slh-dsa/

🔗 Learn more

NIST ML-DSA - FIPS PUB 204: Module-Lattice-Based Digital Signature Standard: https://csrc.nist.gov/pubs/fips/204/final

NIST SLH-DSA - FIPS PUB 205: Stateless Hash-Based Digital Signature Standard: https://csrc.nist.gov/pubs/fips/205/final

ℹ️ Disclaimer: The information provided in this video is for educational purposes only. While we aim to offer helpful concepts and best practices, viewers should exercise their own discretion and judgment when applying the information. We do not guarantee the accuracy or completeness of the content, and the creators and contributors shall not be held responsible for any errors or actions taken based on the information presented. By watching this video, you acknowledge and accept that you are solely responsible for your decisions and actions.

Видео #KEYMASTER | Stateless PQC Digital Signatures: Insights into ML-DSA & SLH-DSA канала Keyfactor