slh-dsa-multi 0.1.0

Multi-backend FIPS-205 SLH-DSA bindings

Beware: This package have been generated and has not been audited.

slh_dsa_multi

Multi-backend FIPS-205 SLH-DSA bindings.

While waiting for SLH-DSA in pyca/cryptography this exposes a range of SLH-DSA implementations.

The default vendored backend is slhdsa-c can be rebuild via pip install.

This an unaudited and experimental library.

Backends

Backend	Source	Selected as	Pinned
slhdsa-c	vendored, compiled at install	"slhdsa-c"	2b111e07
nettle	vendored, compiled at install	"nettle"	66c7ef01
go-slh-dsa	prebuilt wheels only	"go"	15ed0951
botan3	system botan3 bindings	"botan3"	n/a
liboqs	system oqs (liboqs-python)	"liboqs"	n/a
OpenSSL	system OpenSSL3.5 or later	"openssl"	n/a

Use the backend= API argument or SLH_DSA_BACKEND environment variable to select.

Quickstart

from slh_dsa_multi import SLHDSAPrivateKey

sk = SLHDSAPrivateKey.generate("SLH-DSA-SHA2-128s")
pk = sk.public_key()

sig = sk.sign(b"hello world")
pk.verify(sig, b"hello world")

raw = sk.private_bytes_raw()
sk2 = SLHDSAPrivateKey.from_private_bytes(raw, "SLH-DSA-SHA2-128s")

Domain separation via context=b"...". No pre-hash variants are supported.

Signing is randomized (hedged) by default for practical security.

Deterministic signing deterministic=True should use a secret seed addrnd=os.urandom(16) stored with the private key.

Benchmarks

See how these bindings perform:

This comparison is unfair due to the way these backends have been packaged.

If you don't know which one to pick, use the default or openssl as usual.

License

See LICENSE

Vendored backends:

• slhdsa-c (ISC or MIT or Apache-2.0)
• nettle (LGPLv3+/GPLv2+)
• go-slh-dsa (BSD-3-Clause)

These bindings targets GPL-3.0-only and can be reused.