pqcstatus
Algorithm

SLH-DSA: quantum risk, deadlines and replacements

Quantum-resistant

Stateless hash-based post-quantum signatures (FIPS 205). Conservative security, larger signatures.

At a glance

Quantum riskQuantum-resistant
Used forDigital signature
Post-quantum algorithmYes

Positions and deadlines by authority

AuthorityPositionEffectiveScopeDetails
NISTRecommendedin forceall variants
ANSSIAcceptablein forceall variantsHash-based signatures may be used without hybridation.

Sources

  1. FIPS 205 — Stateless Hash-Based Digital Signature Standard (SLH-DSA) · NIST
  2. FAQ — Cryptographie post-quantique · ANSSI (guidance)

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Is SLH-DSA quantum-safe?

Yes. No known quantum attack breaks SLH-DSA at the recommended parameter sizes.