Beware!

This package was created using the assistance of AI-enabled tooling, it has been reviewed by a human, but has not yet been audited.

slh_dsa_multi

Multi-backend FIPS-205 SLH-DSA bindings.

While waiting for SLH-DSA in pyca/cryptography this exposes a range of SLH-DSA implementations.

The default vendored backend is slhdsa-c can be rebuild via pip install.

This an unaudited and experimental library.

Backends

Use the backend= API argument to select a non-default backend explicitly.

Quickstart

from slh_dsa_multi import SLHDSAPrivateKey

sk = SLHDSAPrivateKey.generate("SLH-DSA-SHAKE-128s")
pk = sk.public_key()

sig = sk.sign(b"hello world")
pk.verify(sig, b"hello world")

raw = sk.private_bytes_raw()
sk2 = SLHDSAPrivateKey.from_private_bytes(raw, "SLH-DSA-SHAKE-128s")

Domain separation using context=b"...". No pre-hash variants are supported.

Signing is pure and randomized (hedged) by default.

Deterministic signing deterministic=True should use a seed addrnd=os.urandom(16) stored next to the private key.

Security notes

Key material is held in Python bytes.

They are only wiped from memory when the interpreter exits.

Benchmarks

See how these bindings perform:

This comparison is unfair due to the way these backends have been packaged.

If you don't know which one to pick, use the default or openssl as usual.

License

See LICENSE

Vendored backends:

• slhdsa-c (ISC or MIT or Apache-2.0)
• nettle (LGPLv3+/GPLv2+)

These bindings targets GPL-3.0-only and can be reused.