draft-fregly-dnsop-slh-dsa-mtl-dnssec

Stateless Hash-Based Signatures in Merkle Tree Ladder Mode (SLH-DSA-MTL) for DNSSEC

groupnone stateactive pages12 rev06 expires2026-10-01 canonicalhttps://datatracker.ietf.org/doc/draft-fregly-dnsop-slh-dsa-mtl-dnssec/
This document describes how to apply the Stateless Hash-Based Digital Signature Algorithm in Merkle Tree Ladder mode to the DNS Security Extensions. This combination is referred to as the SLH-DSA-MTL Signature scheme. This document describes how to specify SLH-DSA-MTL keys and signatures in DNSSEC. It uses both the SHA2 and SHAKE family of hash functions. This document also provides guidance for use of EDNS(0) in signature retrieval.