ML-DSA-87
ML-DSA (FIPS 204) is a lattice-based digital signature scheme, standardized by NIST in August 2024. Built on Module Learning With Errors, it offers fast verification and moderate signature sizes.
- CPU
- Xeon Platinum 8259CL @ 2.50GHz
- Instance
- t3.mediumburstable
- OS / Kernel
- 24.04.4 LTS
- liboqs
- 0.15.0
- Wall clock
- 54m 10s
- CPU steal
- 6.9%
Parameters
- Family
- ML-DSA
- Parameter set
- 87
- Public key
- 2.53 KB
- Private key
- 4.78 KB
- Signature
- 4.52 KB
- Iterations / op
- 1,000
- liboqs key
- ML-DSA-87
Regulatory approval status
Whether this algorithm family is approved/recommended for use under three regimes. Every badge links to its source — click through before citing this elsewhere.
CNSA 2.0 replaces ECDSA/RSA digital signatures with ML-DSA.
NSA CNSA 2.0 Cybersecurity Advisory · not directly verified this session, spot-check the sourceCovered under §5.3.4 "Quantum-Safe Signature Schemes" (current 2026-01 version).
BSI TR-02102-1, Version 2026-01 · not directly verified this session, spot-check the sourceSame recommendation pattern as ML-KEM: highest available NIST level (5 preferred, else 3), standardized parameters only.
ANSSI views on the Post-Quantum Cryptography transition (2023 follow up), §2- Mean
- 87.8 µs
- Median
- 75.3 µs
- p95
- 133.2 µs
- p99
- 325.2 µs
- Stdev
- 48.1 µs
- Min
- 73.8 µs
- Ops/sec
- 11,389
Click any point to view the GitHub Actions run that produced it.
- Mean
- 186.4 µs
- Median
- 155.7 µs
- p95
- 392.9 µs
- p99
- 533.7 µs
- Stdev
- 98.0 µs
- Min
- 97.5 µs
- Ops/sec
- 5,365
Click any point to view the GitHub Actions run that produced it.
- Mean
- 74.8 µs
- Median
- 72.9 µs
- p95
- 82.5 µs
- p99
- 109.6 µs
- Stdev
- 7.9 µs
- Min
- 72.4 µs
- Ops/sec
- 13,371
Click any point to view the GitHub Actions run that produced it.