| Features | |
| * Add the LMS post-quantum-safe stateful-hash asymmetric signature scheme. | |
| Signature verification is production-ready, but generation is for testing | |
| purposes only. This currently only supports one parameter set | |
| (LMS_SHA256_M32_H10), meaning that each private key can be used to sign | |
| 1024 messages. As such, it is not intended for use in TLS, but instead | |
| for verification of assets transmitted over an insecure channel, | |
| particularly firmware images. | |
| * Add the LM-OTS post-quantum-safe one-time signature scheme, which is | |
| required for LMS. This can be used independently, but each key can only | |
| be used to sign one message so is impractical for most circumstances. |