[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-208":3},{"item":4,"lessons":16,"controls":66,"related":94},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-208","SP 800-208","SP 800-208: Recommendation for Stateful Hash-Based Signature Schemes",24,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST recommendation approving two stateful hash-based signature schemes, LMS and XMSS, including their multi-tree variants. These schemes are considered resistant to attacks by quantum computers and are intended for specific uses such as firmware and software signing, where the number of signatures is limited and state can be managed carefully. It is part of NIST's post-quantum work but is not the general post-quantum standard.\n\n**In practice.** The schemes are used where long-term signature security matters, in hardware or controlled environments that can manage signing state reliably. Organisations make sure a one-time key is never reused, which would break security. Evidence includes design records for signing infrastructure and controls on state management and backups.\n\n**Common gaps.** Common gaps are underestimating the state management risk, especially around backups or cloning of signing systems.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpublications\u002Fsp800","Find it among NIST SP 800 publications","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"organizations-must-begin-testing-post-quantum-certificate-ecosystems-now","Organizations Must Begin Testing Post-Quantum Certificate Ecosystems Now","2026-10-08T22:21:07.63+00:00",{"slug":23,"title":24,"published_at":25},"quantum-computing-threatens-todays-encryption-act-now","Quantum Computing Threatens Today's Encryption — Act Now","2026-10-08T12:21:46.771+00:00",{"slug":27,"title":28,"published_at":29},"enterprises-unprepared-for-ai-and-quantum-cyber-threats","Enterprises Unprepared for AI and Quantum Cyber Threats","2026-10-01T16:21:09.7+00:00",{"slug":31,"title":32,"published_at":33},"four-emerging-cyber-threats-demand-proactive-resilience-planning","Four Emerging Cyber Threats Demand Proactive Resilience Planning","2026-09-29T12:20:52.94+00:00",{"slug":35,"title":36,"published_at":37},"g7-urges-urgent-shift-to-post-quantum-cryptography","G7 Urges Urgent Shift to Post-Quantum Cryptography","2026-09-03T20:20:23.464+00:00",{"slug":39,"title":40,"published_at":41},"google-clouds-2029-post-quantum-cryptography-deadline-signals-urgent-crypto-migration-need","Google Cloud's 2029 Post-Quantum Cryptography Deadline Signals Urgent Crypto Migration Need","2026-08-14T12:21:14.711+00:00",{"slug":43,"title":44,"published_at":45},"ai-uncovers-theoretical-cryptographic-weaknesses-in-post-quantum-algorithms","AI Uncovers Theoretical Cryptographic Weaknesses in Post-Quantum Algorithms","2026-07-28T22:20:52.242+00:00",{"slug":47,"title":48,"published_at":49},"preparing-enterprise-pki-for-post-quantum-cryptography-and-ai-driven-certificate-management","Preparing Enterprise PKI for Post-Quantum Cryptography and AI-Driven Certificate Management","2026-07-22T15:20:49.409+00:00",{"slug":51,"title":52,"published_at":53},"quantum-computing-forces-cryptography-overhaul-by-2029","Quantum Computing Forces Cryptography Overhaul by 2029","2026-07-01T12:21:07.439+00:00",{"slug":55,"title":56,"published_at":57},"microsoft-accelerates-quantum-safe-cryptography-transition-to-2029","Microsoft Accelerates Quantum-Safe Cryptography Transition to 2029","2026-06-30T22:21:28.136+00:00",{"slug":59,"title":60,"published_at":61},"quantum-computing-threatens-todays-encrypted-data-act-now","Quantum Computing Threatens Today's Encrypted Data — Act Now","2026-06-30T22:20:56.145+00:00",{"slug":63,"title":64,"published_at":65},"quantum-computing-threatens-todays-encrypted-data-via-harvest-now-decrypt-later","Quantum Computing Threatens Today's Encrypted Data via 'Harvest Now, Decrypt Later'","2026-06-29T12:20:20.018+00:00",[67,72,77,82,86,90],{"slug":68,"name":69,"problem":70,"stories":71},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control.",21,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",3,{"slug":78,"name":79,"problem":80,"stories":81},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",2,{"slug":83,"name":84,"problem":85,"stories":81},"patch-management","Automated patch management","Known holes get closed in days, not months.",{"slug":87,"name":88,"problem":89,"stories":81},"compliance-automation","Compliance automation (GRC)","Evidence for NIS2, DORA and ISO 27001 is collected continuously, not in a rush before the audit.",{"slug":91,"name":92,"problem":93,"stories":81},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[95,101,107,113,118,123,128,134],{"family":96,"item":97,"code":98,"title":99,"together":100},"cis","3","Control 3","Data Protection",23,{"family":102,"item":103,"code":104,"title":105,"together":106},"nist-csf","pr-ds","PR.DS-1","Data Security",18,{"family":108,"item":109,"code":110,"title":111,"together":112},"gdpr","32","Article 32","Security of processing",17,{"family":96,"item":114,"code":115,"title":116,"together":117},"16","Control 16","Application Software Security",13,{"family":5,"item":119,"code":120,"title":121,"together":122},"800-57","SP 800-57","SP 800-57: Recommendation for Key Management",10,{"family":124,"item":125,"code":126,"title":126,"together":127},"itil","overview","ITIL",8,{"family":129,"item":130,"code":131,"title":132,"together":133},"iso-27001","a-8-24","Annex A 8.24","ISO\u002FIEC 27001:2022 Annex A 8.24: Use of cryptography",5,{"family":96,"item":135,"code":136,"title":137,"together":76},"4","Control 4","Secure Configuration of Enterprise Assets and Software"]