[tahoe-dev] Hash based Signatures for Tahoe LAFS

[Zooko Wilcox-O'Hearn]

Dear David-Sarah:

I see that you edited `OneHundredYearCryptography`_ to say that Julian
Wälde's hash-based sigs were stateful. Why do you think so? My reading
of his post [1] is that it is GMSS with deterministic mapping from
message (128-bit) to leaf, and I looked at the source code
(admittedly, not understanding it very well) and didn't see any state.

Regards,

Zooko

.. _OneHundredYearCryptography:
https://tahoe-lafs.org/trac/tahoe-lafs/wiki/OneHundredYearCryptography

[1] https://tahoe-lafs.org/pipermail/tahoe-dev/2011-March/006237.html