Skip to content

fix: LMOTS pattern, add HSS variant (LMS family) #1029

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Mehrn0ush wants to merge 4 commits into
base: master
Choose a base branch
from
Open

fix: LMOTS pattern, add HSS variant (LMS family) #1029

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
10f026d
fix: correct LMOTS Winternitz parameter and add HSS variant
Mehrn0ush Aug 16, 2026
112e5fe
feat: document naming-pattern notation and add per-level HSS pattern
Mehrn0ush Sep 27, 2026
9ac5fcf
Merge branch 'master' into fix/lms-hss-variant-model
jkowalleck Sep 29, 2026
463ad60
docs: shorten naming-pattern description per review
Mehrn0ush Oct 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions schema/cryptography-defs.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -802,15 +802,23 @@
{
"name": "RFC8554",
"url": "https://doi.org/10.17487/RFC8554"
},
{
"name": "RFC9858",
"url": "https://doi.org/10.17487/RFC9858"
}
],
"variant": [
{
"pattern": "LMS[_{hashAlgorithm}][_M{bytesPerNode}][_H{treeHeight}]",
"pattern": "LMS[_(SHA256|SHAKE)][_M{bytesPerNode}][_H{treeHeight}]",
"primitive": "signature"
},
{
"pattern": "LMOTS[_(SHA256|SHAKE)][_N{hashOutputLength}][_W{winternitzParameter}]",
"primitive": "signature"
},
{
"pattern": "LMOTS[_{hashfun}][_N{bytespernode}][_H{treeheight}]",
"pattern": "HSS[_L{levels}][(_<LMS>_<LMOTS>)+]",
"primitive": "signature"
}
]
Expand Down
4 changes: 2 additions & 2 deletions schema/cryptography-defs.schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -71,8 +71,8 @@
"properties": {
"pattern": {
"type": "string",
"title": "Standard Name",
"description": "Defines the pattern used to construct the complete algorithm name. Placeholders are defined by {} for algorithm-specific properties."
"title": "Naming Pattern",
"description": "Defines the pattern used to construct the algorithm name. `{name}` is a placeholder for an algorithm-specific value, `[ ]` marks optional content, `|` separates alternatives of which exactly one is used, across the whole pattern or within `( )`, and `( )+` repeats a group one or more times. `<Name>` stands for a name built from the variant pattern whose text before the first notation character is `Name`, for example `<LMS>`. All other characters, such as `-`, `_` and the `+` in `SPAKE2+`, are part of the name. An omitted optional part means the value is unspecified, except for a fixed literal such as `[-PKCS7]` or `[E]`, whose absence selects the variant without it. For `HSS`, the `LMS`/`LMOTS` pairs are listed per level, starting at the root; when both `{levels}` and pairs are given, their numbers shall be equal."
},
"primitive": {
"type": "string",
Expand Down