The number of LMS public keys

[sunguk-bin-fad]

Hi,
I'm checking caliptra 1.x and see that it has 4 ECC vendor public keys and 32 LMS vendor public keys.
I'm curious ....

• Why is LMS designed to allow up to 31 key revocations, which is significantly more than ECC? I'm curious about the background behind the decision to use 32 LMS keys.
• Compared to the vendor key, why does the owner have only one LMS public key? Since it is HW-anchored, does the system fail to boot if LMS key is exhausted?

[sunguk-bin-fad]

@mhatrevi, @satyamsetti Can you answer these questions? I found you in issue #519 . Since you previously discussed this topic, I hope you can provide background information or answer.

[bgilsrudHPE]

I have the same question. Each LMS key should provide 32K signatures so was it decided that 1M signatures would be required? Is it required that integrators provide unique keys for all 32 slots? Can we zero out the public key slots safely?