Year: 2026
Type: report
Abstract: Stateful Hash-Based Signature Schemes (Stateful HBS) such as Leighton-Micali Signature (LMS), Hierarchical Signature System (HSS), eXtended Merkle Signature Scheme (XMSS), and XMSS MT combine Merkle trees with One-Time Signatures (OTSs) to provide signatures that are resistant against attacks using large-scale quantum computers.Unlike conventional stateless digital signature schemes, Stateful HBS have a state to keep track of which OTS keys have been used, as double-signing with the same OTS key allows forgeries.This document provides guidance and catalogs security considerations for the operational and technical aspects of deploying systems that rely on Stateful HBS.Management of the state of the Stateful HBS, including any handling of redundant key material, is a sensitive topic.This document describes some approaches to handle the associated challenges.It also describes the challenges that need to be resolved before certain approaches should be considered.
DOI: 10.17487/rfc10033
Language: English
Subfield: Computer Networks and Communications
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
OpenAlex ID: W7213304597