We wrote the code, and the code won

Summary: NIST officially announced three standards specifying FIPS-approved algorithms for post-quantum cryptography, including SLH-DSA, formerly known as SPHINCS+. Trail of Bits built an open-source pure-Rust implementation of SLH-DSA that has been merged into RustCrypto, supports all 12 FIPS-approved parameter sets, is no-std capable with no heap allocations, and was independently reviewed by cryptographers who did not write the code.
Why it matters: SLH-DSA's security rests on SHA2 or SHA3 rather than lattice problems, so it can serve as a drop-in replacement for ECDSA, EdDSA, and RSA-PSS - but its large signature sizes and long signing times make it suited to infrequent messages and long-lived keys such as firmware signing, and the transition is a many-year process.

Read the original at Trail of Bits Blog ↗