Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Standards and nonclaims

This repository uses primary standards to define hash behavior and to explain what its custom construction is not:

  • FIPS 180-4 defines SHA-256.
  • FIPS 202 defines SHA-3; the legacy profile intentionally uses older Keccak padding instead.
  • RFC 8391 specifies XMSS.
  • FIPS 205 specifies SLH-DSA.

HashSigs RHDL is not an implementation of RFC 8391 or FIPS 205. It has no Merkle authentication path, hypertree, or standardized parameter-set encoding. It must not be presented as a drop-in standardized post-quantum signature.

Hash-based one-way assumptions are relevant to post-quantum analysis, but that does not substitute for review of this construction, parameter selection, one-time-key management, implementation leakage, or the surrounding protocol.