Hash-Based Signatures: State of Play

Quantum computers haven't yet arrived, but a history of inertia in the wide-scale adoption of new cryptographic schemes means that standardization of postquantum signature schemes-particularly hash-based ones-is both timely and urgent.