Algorithms
What is ML-DSA?
Also known as Dilithium, CRYSTALS-Dilithium.
Module-Lattice-based Digital Signature Algorithm. NIST's primary post-quantum signature standard, finalised as FIPS 204 in August 2024. Three parameter sets (44, 65, 87). Used by QNSI for JWT signing, audit-chain Merkle-root sealing, and CBOM attestation.
Decision context
Why ML-DSA matters
ML-DSA provides standardized post-quantum signatures for software artifacts, identities, audit records, tokens, and other authenticity decisions. Migration requires more than swapping a key type because public keys, signatures, certificate profiles, storage formats, and verifier behaviour differ from classical signature systems.
How to evaluate ML-DSA
Identify the parameter set and every signer and verifier that consumes it. Check deterministic or randomized signing requirements, malformed-signature rejection, key rotation, revocation and algorithm binding. Independently verify a production signature against a separately published public key rather than trusting a self-reported verified flag.
Algorithms
Algorithms evidence boundary
Algorithm names alone do not establish security or deployment readiness. Parameter set, implementation, key and signature sizes, execution boundary, validation status, and failure behaviour all matter. Buyers should distinguish a standardized primitive from a product path that has independently demonstrated that primitive in production.
Deep dive
ML-DSA on QNSI
NIST's primary post-quantum digital signature standard, finalised August 2024 as FIPS 204. ML-DSA powers JWT signing, audit-log integrity, code-signing, and authn token issuance across QNSI.
For parameter sets, key and signature sizes, NIST ACVP conformance status, and when to use it, see the full ML-DSA algorithm reference.
FAQ
Common questions
What is ML-DSA?
Module-Lattice-based Digital Signature Algorithm. NIST's primary post-quantum signature standard, finalised as FIPS 204 in August 2024. Three parameter sets (44, 65, 87). Used by QNSI for JWT signing, audit-chain Merkle-root sealing, and CBOM attestation.
Why does ML-DSA matter?
ML-DSA provides standardized post-quantum signatures for software artifacts, identities, audit records, tokens, and other authenticity decisions. Migration requires more than swapping a key type because public keys, signatures, certificate profiles, storage formats, and verifier behaviour differ from classical signature systems.
How should ML-DSA be evaluated?
Identify the parameter set and every signer and verifier that consumes it. Check deterministic or randomized signing requirements, malformed-signature rejection, key rotation, revocation and algorithm binding. Independently verify a production signature against a separately published public key rather than trusting a self-reported verified flag.
What is ML-DSA also known as?
ML-DSA is also known as Dilithium, CRYSTALS-Dilithium. Module-Lattice-based Digital Signature Algorithm. NIST's primary post-quantum signature standard, finalised as FIPS 204 in August 2024. Three parameter sets (44, 65, 87). Used by QNSI for JWT signing, audit-chain Merkle-root sealing, and CBOM attestation.
More