SLH-DSA-SHAKE-128f
SLH-DSA (FIPS 205) is a stateless hash-based signature scheme, standardized by NIST in August 2024. It relies only on the security of cryptographic hash functions — no number-theoretic assumptions. Larger signatures and slower signing, but the most conservative security basis.
- CPU
- Xeon Platinum 8488C
- Measured on
- c7i.large
- OS / Kernel
- 24.04.4 LTS
- liboqs
- 0.15.0
- Wall clock
- 32m 32s
- CPU steal
- <0.01%
Parameters
- Family
- SLH-DSA
- Parameter set
- SHAKE-128f
- Public key
- 32 B
- Private key
- 64 B
- Signature
- 16.69 KB
- Iterations / op
- 1,000
- liboqs key
- SLH_DSA_PURE_SHAKE_128F
Regulatory approval status
Whether this algorithm family is approved/recommended for use under three regimes. Every badge links to its source — click through before citing this elsewhere.
SLH-DSA is not named as a CNSA 2.0 requirement (ML-DSA is the mandated lattice signature; LMS/XMSS/ML-DSA-87 cover the stateful/firmware case — see the LMS/XMSS row).
NSA CNSA 2.0 Cybersecurity Advisory · not directly verified this session, spot-check the source"Relevant and conservative option" per ANSSI's own cross-reference to BSI's aligned position; also covered under BSI §5.3.4.
BSI TR-02102-1, Version 2026-01 · not directly verified this session, spot-check the source"Relevant and conservative option" for contexts that can afford SPHINCS+/SLH-DSA's larger signatures; hybridization optional; the XMSS/LMS state-handling recommendations apply here too.
ANSSI views on the Post-Quantum Cryptography transition (2023 follow up), §2- Mean
- 1.75 ms
- 95% CI on mean
- ±0.15%
- Median
- 1.75 ms
- p95
- 1.79 ms
- p99
- 1.84 ms
- Stdev
- 42.2 µs
- Min
- 1.65 ms
- Ops/sec
- 572
Mean is known to 1744.56–1749.79 µs across 1,000 iterations. A 95% confidence interval on the mean, not a prediction interval for a single operation. It says how precisely the average is known from this run's samples; the standard deviation says how much the individual samples scattered.
Click any point to view the GitHub Actions run that produced it.
- Mean
- 40.74 ms
- 95% CI on mean
- ±0.03%
- Median
- 40.72 ms
- p95
- 41.04 ms
- p99
- 41.20 ms
- Stdev
- 217.9 µs
- Min
- 40.24 ms
- Ops/sec
- 24.5
Mean is known to 40729.92–40756.93 µs across 1,000 iterations. A 95% confidence interval on the mean, not a prediction interval for a single operation. It says how precisely the average is known from this run's samples; the standard deviation says how much the individual samples scattered.
Click any point to view the GitHub Actions run that produced it.
- Mean
- 2.42 ms
- 95% CI on mean
- ±0.17%
- Median
- 2.42 ms
- p95
- 2.53 ms
- p99
- 2.57 ms
- Stdev
- 64.6 µs
- Min
- 2.21 ms
- Ops/sec
- 414
Mean is known to 2414.11–2422.12 µs across 1,000 iterations. A 95% confidence interval on the mean, not a prediction interval for a single operation. It says how precisely the average is known from this run's samples; the standard deviation says how much the individual samples scattered.
Click any point to view the GitHub Actions run that produced it.