About ML-DSA
ML-DSA (previously known as CRYSTALS-Dilithium) is a lattice-based digital signature algorithm standardized by NIST as FIPS 204. It provides a quantum-resistant way to generate and verify digital signatures.
Like ML-KEM, the algorithm is based on the hardness of the Module Learning With Errors (MLWE) problem, making it resistant to attacks from both classical and quantum computers.
ML-DSA is designed to replace current digital signature algorithms like RSA and ECDSA (Elliptic Curve Digital Signature Algorithm) in applications requiring document signing, code signing, certificate validation, and more.
Security Levels
ML-DSA-44
128-bit security level
ML-DSA-65
192-bit security level
ML-DSA-87
256-bit security level
How ML-DSA Works
1. Key Generation
The signer generates a key pair consisting of a public key that will be published and a secret key that is kept confidential.
2. Signing
The signer uses their secret key to create a digital signature for a message, which serves as proof of authenticity.
Output: Digital Signature
3. Verification
Anyone can verify the signature's authenticity using the signer's public key, confirming the message hasn't been altered.
Output: Valid or Invalid
ML-DSA Operations
ML-DSA Operations
Explore ML-DSA's key generation, signing, and verification operations at different security levels.
Parameters
Result
Select parameters and execute an operation to see results
Interactive ML-DSA Demo
Try ML-DSA Signing & Verification
Experience the full ML-DSA workflow with our interactive implementation. Generate keys, sign data, and verify signatures with different security levels.
Interactive ML-DSA DemoReal-World Applications
ML-DSA can be integrated into existing applications and protocols to provide quantum-resistant digital signatures. Here are some common use cases:
Document Signing
Secure digital certificates and document signing with quantum-resistant signatures for long-term validity.
Code Signing
Ensuring software authenticity with post-quantum signatures to maintain secure software distribution.
Authentication
User and service authentication with post-quantum signatures for secure login and authorization.