ML-DSA

FIPS 204

Module-Lattice-Based Digital Signature using Fiat-Shamir with Aborts. Parameters: n=8, q=17, k=2, l=2, γ=4, β=2 (simplified).

Algorithm Parameters

Presets

8
432
17
797
2
26
2
25
4
212
2
16
Security estimate:High

Complexity ~131 bits. Rejection margin γ-β=2.

18/64

Learn More

Fiat-Shamir Protocol

Waiting...🔑Signerhas s1, s2🛡️Verifierhas A, tw = Ay (commitment)c = H(msg, w) (challenge)z = y + cs1 (response)Sign a message to see the protocol in actioncommitmentchallengeresponse
Commitment (w = Ay)Challenge (c = H(msg,w))Response (z = y + cs1)Rejected (z too large)

Enter a message and click "Sign" to see the Fiat-Shamir with Aborts protocol