Stateful Hash-Based Signature Schemes
summary
Stateful hash-based signatures trade tiny public keys for a limited, trackable pool of one-time keys and require authenticated state transfers; the talk shows a practical solution using HSMs + encrypted export/import to avoid OTS reuse and reduce global state to local state, claiming this solves ~99% of operational cases. Examples: Merkle trees and multi-tree forests, firmware OTA and root CA use cases, typical deployments expect thousands (not millions) of signatures. Recommended features: symmetric encryption for state transport and external key storage for disaster recovery.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 0:27Speaker introduction
- 1:10Stateful hash signatures
- 2:20Basics of hash signatures
- 5:54Merkle trees explained
- 9:02Pros and cons
- 10:41Practical limitations
- 14:22Algorithm comparison
- 16:40Overcoming limitations
- 20:01Secure backup procedures
- 22:58State handling solutions
- 28:54Comparing strategies
- 30:27Session summary
- 32:24Q&A session
- 40:23Closing remarks
