Skip to main content

RFC 9909 - Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA)

  • Status: Proposed Standard
  • Published: December 2025
  • Stream: IETF
  • Pages: 38
  • Errata: No Errata

Abstract

This document specifies algorithm identifiers and conventions for using the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA) in the Internet X.509 Public Key Infrastructure. It defines how SLH-DSA public keys and signatures are represented in certificates and related PKI structures.

The specification supports post-quantum signature deployment by providing interoperable object identifiers and encoding guidance for X.509 implementations.