ML-DSA
Module-Lattice-Based Digital Signature Algorithm
A post-quantum signature scheme derived from CRYSTALS-Dilithium, whose public keys and signatures are much larger than ECDSA’s, which matters for certificates and constrained protocols.
Covered in
Post-quantum migration: cryptographic inventory, hybrid TLS and deadlines
Inventory public-key cryptography by operation, owner and lifetime, turn on hybrid ML-KEM key exchange where it is already available, and plan signature and archive migration against the NIST, NSA, NCSC and EU dates.
Choose cryptographic algorithms and parameters by job
A sourced quick reference for October 2026: which algorithm and parameters to use for encryption, hashing, passwords, MACs, signatures, key agreement, key derivation, randomness and TLS, the matching APIs in Node.js, Python, Java, Go and .NET, and where post-quantum migration stands.
Practice: Insecure randomness lab: Generate unguessable API keys