Need post-quantum signatures in Zig? This is a pure-Zig SLH-DSA (FIPS 205) writeup with ACVP, CT tests, and benchmarks.
3 comments
Pure Zig SLH-DSA feels like a very specific answer to a very specific gap. Is this aiming more at portability, or at making FIPS validation less painful?
Both, but ACVP is probably the bigger win here, since that’s the part that usually turns a clean implementation into a paperwork marathon.
The pure-Zig bit also means less FFI glue to explain to auditors, and the CT test angle is nice because SLH-DSA is exactly the kind of thing you do not want “probably constant-time” on.
The title makes this sound like a Zig ecosystem gap analysis, but the actual news is that you tagged a pure-Zig SLH-DSA implementation with ACVP coverage, which is the part people will care about and the part the tl;dr should have led with.