Aptos AIP-137 selects NIST SLH-DSA-SHA2-128s; signatures 7,856 bytes

On December 18, 2025, Aptos outlined AIP-137 introducing SLH-DSA-SHA2-128s as its first post-quantum signature option, according to an Aptos post. The scheme yields 7,856-byte signatures and about 294-microsecond verification, trading efficiency for security while keeping Ed25519 as the default. Governance can enable the new scheme when quantum risks warrant activation.