Stateful hash-based signatures (NIST SP 800-208), intended for firmware and software signing.
At a glance
| Quantum risk | Quantum-resistant |
|---|---|
| Used for | Digital signature |
| Post-quantum algorithm | Yes |
Positions and deadlines by authority
| Authority | Position | Effective | Scope | Details |
|---|---|---|---|---|
| NSA (CNSA 2.0) | Recommended | in force | all variants | CNSA 2.0 algorithm for software and firmware signing. |
Sources
- SP 800-208 — Recommendation for Stateful Hash-Based Signature Schemes (LMS, XMSS) · NIST
- CNSA 2.0 Algorithms (Cybersecurity Advisory) · NSA (guidance)
Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.