A new Request for Comments is now available in online RFC libraries.
RFC 10033
Title: Hash-Based Signatures: State and Backup Management
Author: T. Wiggers,
K. Bashiri,
S. Kölbl,
J. Goodman,
S. Kousidis
Status: Informational
Stream: IETF
Date: September 2026
Mailbox: [email protected],
[email protected],
[email protected],
[email protected],
[email protected]
Pages: 20
I-D Tag: draft-ietf-pquip-hbs-state-04
URL: https://www.rfc-editor.org/info/rfc10033
DOI: 10.17487/RFC10033
Stateful Hash-Based Signature Schemes (Stateful HBS) such as Leighton-Micali
Signature (LMS),
Hierarchical Signature System (HSS), eXtended Merkle Signature Scheme (XMSS),
and XMSS^MT
combine Merkle trees with One-Time Signatures (OTSs) to provide signatures that
are resistant
against attacks using large-scale quantum computers. Unlike conventional
stateless digital
signature schemes, Stateful HBS have a state to keep track of which OTS keys
have been used,
as double-signing with the same OTS key allows forgeries.
This document provides guidance and catalogs security considerations for the
operational and
technical aspects of deploying systems that rely on Stateful HBS. Management of
the state of
the Stateful HBS, including any handling of redundant key material, is a
sensitive topic.
This document describes some approaches to handle the associated challenges. It
also describes
the challenges that need to be resolved before certain approaches should be
considered.
This document is a product of the Post-Quantum Use In Protocols Working Group
of the IETF.
INFORMATIONAL: This memo provides information for the Internet community.
It does not specify an Internet standard of any kind. Distribution of
this memo is unlimited.
This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
https://www.ietf.org/mailman/listinfo/ietf-announce
https://mailman.rfc-editor.org/mailman/listinfo/rfc-dist
For searching the RFC series, see https://www.rfc-editor.org/search/
For downloading RFCs, see https://www.rfc-editor.org/series/rfc-download/
Requests for special distribution should be addressed to either the
author of the RFC in question, or to [email protected]. Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.
The RFC Editor Team
_______________________________________________
IETF-Announce mailing list -- [email protected]
To unsubscribe send an email to [email protected]
