Standards & programs
What is FIPS 204?
NIST Federal Information Processing Standard for ML-DSA. Final, published August 2024. Authoritative spec for ML-DSA-44 / 65 / 87.
Decision context
Why FIPS 204 matters
FIPS 204 is the finalized algorithm standard for ML-DSA signatures. It defines parameter sets and operations, but it does not certify a library, hardware module, token format, audit chain or software-signing system merely because those surfaces advertise an ML-DSA name.
How to evaluate FIPS 204
Verify the parameter set, key generation, signing and verification implementation with authoritative vectors and negative cases. Independently validate a real production signature using a separately published public key. Keep CAVP algorithm evidence, CMVP module status and application-level assurance clearly separated.
Standards & programs
Standards & programs evidence boundary
Standards define algorithms, testing methods, transition expectations, or regulatory obligations; they do not automatically certify a product or deployment. Confirm the exact publication, version, scope, implementation evidence, and accountable assessment route before describing a system as compliant or validated.
FAQ
Common questions
What is FIPS 204?
NIST Federal Information Processing Standard for ML-DSA. Final, published August 2024. Authoritative spec for ML-DSA-44 / 65 / 87.
Why does FIPS 204 matter?
FIPS 204 is the finalized algorithm standard for ML-DSA signatures. It defines parameter sets and operations, but it does not certify a library, hardware module, token format, audit chain or software-signing system merely because those surfaces advertise an ML-DSA name.
How should FIPS 204 be evaluated?
Verify the parameter set, key generation, signing and verification implementation with authoritative vectors and negative cases. Independently validate a real production signature using a separately published public key. Keep CAVP algorithm evidence, CMVP module status and application-level assurance clearly separated.
More