SLH-DSA-SHA2-128f Security API
Side-channel claim limit. Nothing on this page claims constant-time behaviour or side-channel resistance for any target: the side-channel harness covers nothing (finding A48) and no measurement exists. The Rust and C cores are designed for constant time and unmeasured; managed runtimes (JIT, GC, bounds checks) make no timing claim. Where this page names constant-time or side-channel techniques, in prose or in code, they are design intent or recommendations, not measured properties.
Version: 1.0.0
Last Updated: 2025-01-02
Security Classification: Stateless Hash-Based Signature
Author: MetaMUI Security Team
Overview
SLH-DSA-SHA2-128f (SPHINCS+) is a stateless hash-based signature scheme using SHA-256, providing 128-bit security without state management requirements.
- Algorithm Family: Hash-based signature
- NIST Security Level: Level 1 (128-bit security)
- Key Sizes:
- Public Key: 32 bytes
- Secret Key: 64 bytes
- Signature: 7856 bytes (fast variant)
- Standard: FIPS 205
Security Warnings ⚠️
- Large Signatures: 7856 bytes per signature
- Stateless: No state management required (advantage)
- Hash-based Security: Security relies on SHA-256
- Fast Variant: Optimized for signing speed
API Functions
Key Generation
def slh_dsa_sha2_128f_keygen() -> Tuple[PublicKey, SecretKey]:
"""Generate stateless hash-based keypair"""
Signing
def slh_dsa_sha2_128f_sign(message: bytes, secret_key: SecretKey) -> Signature:
"""Sign with stateless hash-based signature"""
Verification
def slh_dsa_sha2_128f_verify(message: bytes, signature: Signature, public_key: PublicKey) -> bool:
"""Verify hash-based signature"""
Security Best Practices
- Use when stateless operation is required
- Suitable for firmware signing
- Consider signature size in bandwidth-limited applications
- No special state management needed
Security Analysis
Threat Model: SLH-DSA-SHA2-128f Threat Model
The comprehensive threat analysis covers:
- Algorithm-specific attack vectors
- Implementation vulnerabilities
- Side-channel considerations
- Quantum resistance analysis (where applicable)
- Deployment recommendations
For complete security analysis and risk assessment, see the dedicated threat model documentation.