Bug#1143005: ITP: python-slh-dsa -- Python implementation of the SLH-DSA signature scheme

Simon Josefsson <[email protected]> Wed, 29 Jul 2026 17:08:11 +0200
Newsgroups gmane.linux.debian.devel.wnpp
Message-ID <877bmdomuc.fsf__8281.3174974703$1785337890$gmane$org@josefsson.org>
I'm happy to review and potentially sponsor - please upload to
mentors.d.net and send me a Salsa URL when you are ready for review.

/Simon

xu colin <[email protected]> writes:

> Package: wnpp
> Severity: wishlist
> Owner: Xu Colin <[email protected]>
> X-Debbugs-Cc: [email protected]
>
>    -
>
>    Package name : python-slh-dsa
>    Version : 0.2.3
>    Upstream Author : Xu Colin <[email protected]>
>    -
>
>    URL : https://github.com/colinxu2020/slhdsa
>    -
>
>    License : GNU Lesser General Public License Version 3
>    Programming Lang: Python
>    Description : Python implementation of the SLH-DSA signature scheme
>
> slh-dsa is a Python implementation of SLH-DSA, the stateless
> hash-based digital signature algorithm standardized in FIPS 205.
> It provides the public Python module "slhdsa" and supports Python 3.
> The package has no third-party runtime dependencies.
> .
> Performance-sensitive modules can optionally be compiled into CPython
> extension modules using mypyc. The upstream project uses setuptools as
> its PEP 517 build backend and provides automated tests, continuous
> integration, and binary-wheel builds through cibuildwheel.
> .
> The project has been actively maintained over the past three years,
> with its most recent upstream commit approximately one month ago. It
> currently receives approximately 150,000 downloads per month from
> PyPI and is used as a direct dependency by trezor-firmware.
> .
> I intend to maintain this package in Debian. The proposed binary
> package name is python3-slhdsa. I am not yet a Debian Developer and
> will seek sponsorship for the initial upload.
signature.asc (application/pgp-signature, 1.2 KB)
-----BEGIN PGP SIGNATURE-----
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=WmDm
-----END PGP SIGNATURE-----