From the cryptographer's desk: how we chose HEIMA's post-quantum signature schemes
The reasoning behind ML-DSA-65 and SLH-DSA-SHA2-128s, tested against feedback from external cryptographers, wallet providers, HSM and cloud vendors, and financial authorities, the implementation we built on, the benchmarks, and the one migration path we are deliberately not shipping yet.
