ML-DSA-65
ML-DSA (FIPS 204) is a lattice-based digital signature scheme, standardized by NIST in August 2024. Built on Module Learning With Errors, it offers fast verification and moderate signature sizes.
- CPU
- Xeon Platinum 8259CL @ 2.50GHz
- Instance
- t3.mediumburstable
- OS / Kernel
- 24.04.4 LTS
- liboqs
- 0.15.0
- Wall clock
- 54m 10s
- CPU steal
- 6.9%
Parameters
- Family
- ML-DSA
- Parameter set
- 65
- Public key
- 1.91 KB
- Private key
- 3.94 KB
- Signature
- 3.23 KB
- Iterations / op
- 1,000
- liboqs key
- ML-DSA-65
Regulatory approval status
Whether this algorithm family is approved/recommended for use under three regimes. Every badge links to its source — click through before citing this elsewhere.
CNSA 2.0 replaces ECDSA/RSA digital signatures with ML-DSA.
NSA CNSA 2.0 Cybersecurity Advisory · not directly verified this session, spot-check the sourceCovered under §5.3.4 "Quantum-Safe Signature Schemes" (current 2026-01 version).
BSI TR-02102-1, Version 2026-01 · not directly verified this session, spot-check the sourceSame recommendation pattern as ML-KEM: highest available NIST level (5 preferred, else 3), standardized parameters only.
ANSSI views on the Post-Quantum Cryptography transition (2023 follow up), §2- Mean
- 92.0 µs
- Median
- 90.2 µs
- p95
- 120.4 µs
- p99
- 137.8 µs
- Stdev
- 12.8 µs
- Min
- 65.7 µs
- Ops/sec
- 10,870
Click any point to view the GitHub Actions run that produced it.
- Mean
- 202.9 µs
- Median
- 160.9 µs
- p95
- 472.5 µs
- p99
- 687.6 µs
- Stdev
- 136.3 µs
- Min
- 68.7 µs
- Ops/sec
- 4,928
Click any point to view the GitHub Actions run that produced it.
- Mean
- 67.9 µs
- Median
- 51.4 µs
- p95
- 152.0 µs
- p99
- 293.4 µs
- Stdev
- 63.9 µs
- Min
- 50.2 µs
- Ops/sec
- 14,722
Click any point to view the GitHub Actions run that produced it.