Home

Cryptography & Post-Quantum› SLH-DSA in Depth›Choosing a Hash-Based Root in 2026: Full SLH-DSA, the Limited-Use Sets, or LMS and XMSS

In this series

SLH-DSA in Depth

1Tweakable Hashes and Multi-Target Attacks: What SLH-DSA's Addresses, Public Seed and Proof Actually BuyResearch
2The Signature Budget: How FORS Turns Two-to-the-Sixty-Four into a Graceful Slope, and What s and f Really TradeResearch
3SHA-2 versus SHAKE in SLH-DSA: The Category-Five Break, the SHA-512 Patch and the Single-Block TrickResearch
4Fault Attacks on SLH-DSA: Tree Grafting, Why Verify-After-Sign Misses It, and the Countermeasures That HoldResearch
5Choosing a Hash-Based Root in 2026: Full SLH-DSA, the Limited-Use Sets, or LMS and XMSSResearch

HostExpert

Murali Chillakuru

Press play to begin the conversation.

0:00

19:42

SLH-DSA in Depth · 5 / 5

Choosing a Hash-Based Root in 2026: Full SLH-DSA, the Limited-Use Sets, or LMS and XMSS