Post-Quantum Signature Requirements Under NIST IR 8547 and CNSA 2.0: Implications for Hardware-Enforced One-Time Keys

Two U.S. frameworks now govern the move to post-quantum cryptography: NIST IR 8547, which sets the transition for federal civilian systems, and the NSA’s Commercial National Security Algorithm Suite 2.0 (CNSA 2.0), which governs national security systems (NSS). Both approve the stateful hash-based signature schemes LMS and XMSS, and both depend on preventing one-time key reuse. This paper outlines each framework, compares their algorithm sets and deadlines, and identifies where hardware-enforced one-time key storage, such as Read Only-Once Memory (ROOM), addresses a requirement both frameworks share.