Found 1 record.

Status: Verified (1)

RFC 9858, "Additional Parameter Sets for HSS/LMS Hash-Based Signatures", October 2025

Errata ID: 8749
Status: Verified
Type: Technical
Publication Format(s) : TEXT, HTML
Reported By: Francisco Vial-Prado
Date Reported: 2026-02-10
Verifier Name: Nick Sullivan
Date Verified: 2026-02-12

Section A.3 says:

Test Vector for SHA-256/256

It should say:

Test Vector for SHAKE256/256

Notes:

The test vector is compiled with the parameters LMOTS_SHAKE_N32_W8 and LMS_SHAKE_N32_H5.

--VERIFIER NOTE--
Verified. Section A.3 heading: SHA-256/256 -> SHAKE256/256.
Test vector uses LMOTS_SHAKE_N32_W8 (0x0c) and
LMS_SHAKE_M32_H5 (0x0f). All six figure captions within
the section correctly say SHAKE256/256.

Report New Errata