While ML-KEM-1024 provides post-quantum key encapsulation, node and governance integrity also require strong signature schemes. Zeqron's cold-path option is SLH-DSA (FIPS 205), standardized from SPHINCS+.
Primary (hot-path) signatures use ML-DSA-87 (FIPS 204). SLH-DSA is the conservative hash-based option for selected identity and archival use cases.
Why SLH-DSA?
Unlike lattice-based signature schemes, SLH-DSA is stateless and relies on hash-based security assumptions. That makes it a useful complementary control — not a replacement for ML-DSA on the hot path.
Status
- ::Designed: Yes (security profile draft)
- ::Implemented internally: Yes (protocol crypto stack)
- ::Publicly available: No
- ::Independently audited: Not yet
Security note // Development preview
