wolfSSL is adding SLH-DSA support to wolfProvider, bringing the FIPS 205 stateless hash-based signature standard to OpenSSL applications. The integration uses wolfCrypt underneath wolfProvider, so applications can use SLH-DSA through the OpenSSL provider interface while retaining wolfSSL’s portable cryptographic implementation.
What is Included
- All 12 SLH-DSA SHA2 and SHAKE parameter sets.
- Key management, import/export, signing, and verification.
- OpenSSL provider support for pure-mode signatures.
- Streamed sign and verify support by buffering messages up to 64 MiB.
- Interoperability and negative tests for malformed keys, signatures, buffers, and parameter changes.
SLH-DSA support is under review in wolfProvider PR #459. It requires OpenSSL 3.6 or later and a matching wolfSSL build with SLH-DSA enabled.
If you have questions about any of the above, please contact us at facts@wolfssl.com or call us at +1 425 245 8247.
Download wolfSSL Now