hash-based-signatures

1 post tagged hash-based-signatures.

How SLH-DSA Would Break: The Signature That Can Only Fall If a Hash Falls First

Jul 18, 2026

SLH-DSA has almost no attack surface of its own. A structural tour of FORS, WOTS+ hypertrees and tweakable hashes, and why it fails only if SHA-2 or SHAKE does.