ML-DSA
FIPS 204, formerly CRYSTALS-Dilithium
The NIST-standardised lattice-based digital signature algorithm, intended as the general-purpose post-quantum replacement for RSA-PSS and ECDSA. Signatures are larger than ECDSA but performance is practical for most uses.
In practice
Parameter sets are ML-DSA-44, ML-DSA-65 and ML-DSA-87.
Related terms
A stateless hash-based post-quantum signature scheme whose security depends only on the strength of its underlying hash function. Signatures are large and slow, but the security assumptions are the most conservative of the NIST signature standards.
A lattice-based post-quantum signature scheme selected by NIST for standardisation, valued for signatures substantially smaller than ML-DSA. Implementation is harder because it relies on floating-point Gaussian sampling.
A value that proves a message was produced by the holder of a particular private key and has not been altered since. Signatures provide authenticity and integrity, not confidentiality.
The NIST-standardised post-quantum key encapsulation mechanism, used to establish a shared secret over an untrusted network. It is the replacement for RSA key transport and elliptic-curve Diffie-Hellman.