#1143005 ITP: python-slh-dsa -- Python implementation of the SLH-DSA signature scheme

#1143005#5
Date:
2026-07-29 13:38:55 UTC
From:
To:
   -

   Package name : python-slh-dsa
   Version : 0.2.3
   Upstream Author : Xu Colin <colinxu2020@gmail.com>
   -

   URL : https://github.com/colinxu2020/slhdsa
   -

   License : GNU Lesser General Public License Version 3
   Programming Lang: Python
   Description : Python implementation of the SLH-DSA signature scheme

slh-dsa is a Python implementation of SLH-DSA, the stateless
hash-based digital signature algorithm standardized in FIPS 205.
It provides the public Python module "slhdsa" and supports Python 3.
The package has no third-party runtime dependencies.
.
Performance-sensitive modules can optionally be compiled into CPython
extension modules using mypyc. The upstream project uses setuptools as
its PEP 517 build backend and provides automated tests, continuous
integration, and binary-wheel builds through cibuildwheel.
.
The project has been actively maintained over the past three years,
with its most recent upstream commit approximately one month ago. It
currently receives approximately 150,000 downloads per month from
PyPI and is used as a direct dependency by trezor-firmware.
.
I intend to maintain this package in Debian. The proposed binary
package name is python3-slhdsa. I am not yet a Debian Developer and
will seek sponsorship for the initial upload.

#1143005#10
Date:
2026-07-29 15:08:11 UTC
From:
To:
I'm happy to review and potentially sponsor - please upload to
mentors.d.net and send me a Salsa URL when you are ready for review.

/Simon

xu colin <colinxu2020@gmail.com> writes:

#1143005#15
Date:
2026-07-30 06:36:05 UTC
From:
To:
Hi Simon,
Thank you — I really appreciate your willingness to review it and
potentially sponsor.
I’ll upload the package to mentors.debian.net and send you the Salsa URL
once everything is ready for review.
Best,
Xu Colin.

Simon Josefsson <simon@josefsson.org> 于2026年7月29日周三 23:08写道:

#1143005#22
Date:
2026-08-18 03:24:56 UTC
From:
To:
Hi Simon,

Thank you again for offering to review and potentially sponsor the package.

The package is now ready for review:

   - mentors.debian.net: https://mentors.debian.net/package/python-slh-dsa/
   - Salsa: https://salsa.debian.org/colinxu/slhdsa

There is currently a warning about debian/watch shown on mentors.debian.net.
I believe this is a false positive, as uscan --report-status completes
successfully and reports the expected upstream version.

I would be very grateful if you could review it when you have a chance.
Please let me know if there is anything I should change or improve.

Best regards,
Xu Colin

xu colin <colinxu2020@gmail.com> 于2026年7月30日周四 14:36写道:
xu colin <colinxu2020@gmail.com> 于2026年7月30日周四 14:36写道:

#1143005#27
Date:
2026-08-18 03:28:07 UTC
From:
To:
Hi Simon,

Thank you again for offering to review and potentially sponsor the package.

The package is now ready for review:

   - mentors.debian.net: https://mentors.debian.net/package/python-slh-dsa/
   - Salsa: https://salsa.debian.org/colinxu/slhdsa

  I have also filed an RFS (#1144675) for the package.

There is currently a warning about debian/watch shown on mentors.debian.net.
I believe this is a false positive, as uscan --report-status completes
successfully and reports the expected upstream version.

I would be very grateful if you could review it when you have a chance.
Please let me know if there is anything I should change or improve.

Best regards,
Xu Colin

Simon Josefsson <simon@josefsson.org> 于2026年7月29日周三 23:08写道: