Align to the randomization options in ML-DSA (see "hedged" variant in §6 of FIPS-204) and SLH-DAS (see "opt_rand" in §9.2 of FIPS-205). As I understand we do not define the deterministic versions but rather use the salt in v6 signature packets to sign via the randomized versions.
Translate or adopt terminology (e.g. in ML-KEM they speak of encapsulation/decapsulation keys rather than private/public).
Available at:
https://csrc.nist.gov/News/2023/three-draft-fips-for-post-quantum-cryptography
Work items: