SLH-DSA (FIPS 205)
SLH-DSA (FIPS 205) とは何ですか?
SLH-DSA (FIPS 205)NIST's standardized stateless hash-based post-quantum signature scheme, derived from SPHINCS+ and published as FIPS 205 in August 2024 — the conservative PQ signature option, relying only on hash-function security.
SLH-DSA (Stateless Hash-Based Digital Signature Algorithm), published as FIPS 205 on 13 August 2024, is NIST's conservative post-quantum signature standard, derived from SPHINCS+ . Unlike ML-DSA, which rests on lattice-problem assumptions, SLH-DSA's security depends solely on the properties of its underlying hash function (SHA-256 or SHAKE-256), giving it the strongest theoretical conservatism in the NIST PQC portfolio. The price is size and speed: SLH-DSA signatures range from about 8 KB to 50 KB depending on parameter set (small, fast, robust variants in 128, 192, and 256-bit categories), and signing is markedly slower than ML-DSA. That makes SLH-DSA well suited to use cases where signature size and signing throughput are secondary to long-term resilience and minimal assumption count — root-of-trust signatures, long-lived firmware keys, and certificates that may need to remain trustworthy decades from now. SLH-DSA is 'stateless', a major operational improvement over the stateful XMSS and LMS hash-based signatures, since the signer doesn't need to track which one-time keys have been used.
● 例
- 01
A nation-state root CA issues its top-level signing certificate with SLH-DSA-SHA2-256s to maximise resilience across the certificate's planned 30-year lifetime.
- 02
A secure-boot ROM key uses SLH-DSA so that even if every lattice and elliptic-curve assumption breaks, the signature still verifies.
● よくある質問
SLH-DSA (FIPS 205) とは何ですか?
NIST's standardized stateless hash-based post-quantum signature scheme, derived from SPHINCS+ and published as FIPS 205 in August 2024 — the conservative PQ signature option, relying only on hash-function security. サイバーセキュリティの 暗号 カテゴリに属します。
SLH-DSA (FIPS 205) とはどういう意味ですか?
NIST's standardized stateless hash-based post-quantum signature scheme, derived from SPHINCS+ and published as FIPS 205 in August 2024 — the conservative PQ signature option, relying only on hash-function security.
SLH-DSA (FIPS 205) はどのように機能しますか?
SLH-DSA (Stateless Hash-Based Digital Signature Algorithm), published as FIPS 205 on 13 August 2024, is NIST's conservative post-quantum signature standard, derived from SPHINCS+ . Unlike ML-DSA, which rests on lattice-problem assumptions, SLH-DSA's security depends solely on the properties of its underlying hash function (SHA-256 or SHAKE-256), giving it the strongest theoretical conservatism in the NIST PQC portfolio. The price is size and speed: SLH-DSA signatures range from about 8 KB to 50 KB depending on parameter set (small, fast, robust variants in 128, 192, and 256-bit categories), and signing is markedly slower than ML-DSA. That makes SLH-DSA well suited to use cases where signature size and signing throughput are secondary to long-term resilience and minimal assumption count — root-of-trust signatures, long-lived firmware keys, and certificates that may need to remain trustworthy decades from now. SLH-DSA is 'stateless', a major operational improvement over the stateful XMSS and LMS hash-based signatures, since the signer doesn't need to track which one-time keys have been used.
SLH-DSA (FIPS 205) からどのように防御しますか?
SLH-DSA (FIPS 205) に対する防御は通常、上記の定義で述べたとおり、技術的統制と運用上の実践を組み合わせます。
SLH-DSA (FIPS 205) の別名は何ですか?
一般的な別名: FIPS 205, SPHINCS+ (standardized), Stateless hash-based DSA。
● 関連用語
- cryptography№ 1195
SPHINCS+
ハッシュ関数のみに依拠するステートレスなデジタル署名方式。2024 年 8 月に NIST が FIPS 205(SLH-DSA)として標準化し、構造化された数学的仮定を持たない保守的なポスト量子安全性を提供する。
- cryptography№ 947
耐量子暗号
古典計算機と大規模量子計算機の両方からの攻撃に耐えるよう設計された古典的な暗号アルゴリズム群。
- cryptography№ 767
ML-DSA (FIPS 204)
NIST's standardized post-quantum digital signature algorithm, derived from CRYSTALS-Dilithium and published as FIPS 204 in August 2024 — the default lattice-based PQ signature for code signing, X.509, and DNSSEC over time.
- cryptography№ 768
ML-KEM (FIPS 203)
NIST's standardized post-quantum key encapsulation mechanism, based on the CRYSTALS-Kyber design and published as FIPS 203 in August 2024 — now the default PQ KEM for TLS, IPsec, and hybrid key exchange.
- cryptography№ 355
デジタル署名
メッセージや文書の真正性・完全性・否認防止を証明する公開鍵暗号方式のメカニズム。
- cryptography№ 820
NIST PQC 標準化
ポスト量子暗号アルゴリズムを選定・標準化する NIST の長期プロジェクト。最初の 3 つの標準 FIPS 203・204・205 は 2024 年 8 月に発行された。