[kcolford]

The statefulness is going to be a problem with current cryptographic APIs. There's another post quantum public key signature algorithm called SPHINCS that is supposed to be stateless and will be much more useful.