ML-DSA-87 Security API
Side-channel claim limit. Nothing on this page claims constant-time behaviour or side-channel resistance for any target: the side-channel harness covers nothing (finding A48) and no measurement exists. The Rust and C cores are designed for constant time and unmeasured; managed runtimes (JIT, GC, bounds checks) make no timing claim. Where this page names constant-time or side-channel techniques, in prose or in code, they are design intent or recommendations, not measured properties.
Version: 1.0.0
Last Updated: 2025-01-02
Security Classification: Maximum Security Digital Signature
Author: MetaMUI Security Team
Overview
ML-DSA-87 (formerly Dilithium5) provides NIST security level 5, the highest security level for post-quantum digital signatures.
- Algorithm Family: Lattice-based signature
- NIST Security Level: Level 5 (≥256-bit classical security)
- Key Sizes:
- Public Key: 2592 bytes
- Secret Key: 4864 bytes
- Signature: 4595 bytes
- Standard: FIPS 204
Security Warnings ⚠️
- Maximum Security: For highest-value signatures
- Large Signatures: 4595 bytes per signature
- Performance Impact: Slower than ML-DSA-44/65
- Long-term Security: Suitable for 30+ year security requirements
API Functions
Similar to ML-DSA-44 with maximum security parameters.
Security Analysis
Threat Model: ML-DSA-87 Threat Model
The comprehensive threat analysis covers:
- Algorithm-specific attack vectors
- Implementation vulnerabilities
- Side-channel considerations
- Quantum resistance analysis (where applicable)
- Deployment recommendations
For complete security analysis and risk assessment, see the dedicated threat model documentation.