pull down to refresh

Mind you, we still need a stopgap like hash-based signatures as a conservative fallback in case the assumptions of isogeny crypto are broken in the future.

could you name, let alone define, some salient examples?

The primary candidates I know of are SLH-DSA (AKA SPHINCS+) or SHRINCS. You could technically use plain XMSS or even WOTS, but while more space-efficient these algorithms require statefulness.

reply