Overview - ISO/IEC 14888-4:2024
ISO/IEC 14888-4:2024 specifies stateful hash-based digital signature mechanisms with appendix. First published in 2024 as Part 4 of the ISO/IEC 14888 series, this international standard defines hash-based signature schemes whose security depends solely on the strength of the underlying hash function. Because these schemes are stateful, the standard also provides requirements and guidance for basic state management needed to safely deploy the described algorithms.
Keywords: ISO/IEC 14888-4, stateful hash-based signatures, post-quantum digital signatures, XMSS, LMS, HSS, WOTS+, Merkle tree, state management.
Key technical topics and requirements
- Hash-based signature families covered
- XMSS and XMSS-MT (eXtended Merkle Signature Scheme and multi-tree variant)
- LMS and HSS (Leighton–Micali Signature and Hierarchical Signature Scheme)
- Auxiliary one-time schemes such as WOTS+ and LM-OTS
- Core building blocks and algorithms
- Definitions and algorithms for key generation, signing, verification, and authentication path computation
- Use of Merkle trees, L-tree structures, and Winternitz parameters
- State management
- Mandatory requirements to update and protect signer state (private-key usage counters, indices, etc.) to prevent reuse that would compromise security
- Guidance aimed at robust deployment to avoid forgery due to incorrect state handling
- Supporting material
- Suggested parameter sets, byte order conventions, checksum methods, and ASN.1 object identifiers/module (Annex A)
- Informative annexes with relations to other standards and numerical examples
Note: The standard intentionally ties security to the cryptographic hash function chosen; it does not introduce new hash primitives.
Practical applications and who should use it
- Use cases
- Post-quantum-resilient digital signatures for software and firmware signing, secure boot, software distribution, code-signing, long-term archival integrity, and secure logging
- Signature solutions for constrained or embedded systems where hash-based schemes are attractive
- Primary users
- Security architects, cryptographic engineers, PKI operators, firmware and IoT device vendors, standards bodies, and implementers seeking quantum-resistant signature options
- Benefits
- Predictable security based on hash function properties and standardized algorithms for interoperable implementations
Related standards
- Part of the ISO/IEC 14888 family (see Parts 2 and 3 for algorithm classes based on integer factorization and discrete logarithms). Annex B of 14888-4 discusses relations to other standards and deployment considerations.
Open preview (PDF)Information security — Digital signatures with appendix — Part 4: Stateful hash-based mechanisms
