Hash-based signatures + Hash-based signatures ⇒ DS

Hash-based signatures together with Hash-based signatures implies DS.

Statement

Migrated verbatim from digital-signature § Hash-based signatures:

  • SPHINCS+: stateless hash-based signatures; uses a hyper-tree of XMSS instances and a few-time signature at the leaves; standardized by NIST as SLH-DSA (FIPS 205); signatures are –50 KB

Notes

source: folklore: the claim carried no citation on the page it was migrated from, and none was invented.

Recorded during migration and not fixed — these are claims about the source text, not changes to it:

  • No wiki citation (FIPS 205 named in prose only; the SPHINCS+ paper has no reference page).
  • few-time-signature has no wiki page.
  • The concrete size claim (~8-50 KB) is an uncited quantitative claim, which CLAUDE.md forbids, and the edge cannot carry it anyway.
  • Hypotheses ‘xmss’ and ‘few-time-signature’ are concrete schemes/variants with no pages — the relation is between named artifacts, not model objects.
  • Concrete size claim (–50 KB) uncited, which CLAUDE.md forbids.