2021-07-21 13:42:15 +02:00
|
|
|
Features
|
2022-08-24 14:33:35 +02:00
|
|
|
* Add the LMS post-quantum-safe stateful-hash asymmetric signature scheme.
|
|
|
|
|
Signature verification is production-ready, but generation is for testing
|
|
|
|
|
purposes only. This currently only supports one parameter set
|
|
|
|
|
(LMS_SHA256_M32_H10), meaning that each private key can be used to sign
|
|
|
|
|
1024 messages. As such, it is not intended for use in TLS, but instead for
|
|
|
|
|
verification of assets transmitted over an insecure channel, particularly
|
|
|
|
|
firmware images.
|
2021-07-21 13:42:15 +02:00
|
|
|
* Add the LM-OTS post-quantum-safe one-time signature scheme, which is
|
|
|
|
|
required for LMS. This can be used independently, but each key can only be
|
|
|
|
|
used to sign one message so is impractical for most circumstances.
|
