Stateful Hash based Signatures: Practical Enhancements and Lessons learned
summary
Claims a practical system that preserves OTS safety while automating state handling using HSMs, with a formal UC model proof of the distributed protocol. Key generation is parallelized across multiple HSMs (roughly linear speedup with number of HSMs), authentication-path computation is outsourced to external storage/modules to cut HSM load, and state-management policies rebalance keys automatically. Implementation runs in the field for firmware- and CA-style use cases, performance improves, and regulatory constraints (NIST guidance) remain the main open issue.
AI-written summary · about
chapters (10)
- 0:00Welcome
- 1:25Stateful hash-based signatures overview
- 4:39State handling and key management
- 8:57Distributed key setup and OTS preservation
- 12:08Security proof for state handling
- 14:15Automation in HSMs
- 17:08Key generation speed
- 19:39Parallel signature generation
- 22:49Summary and open challenges
- 24:58Q&A
