ML-DSA
Every article tagged ML-DSA, newest first.
7 articles
Learn post-quantum cryptography by generating the keys yourself
We have published four plain-language explainers of the algorithms that matter, RSA, elliptic curve, ML-KEM and ML-DSA, and two browser tools that let you generate real keys and run real operations with them. Everything runs in your tab, nothing is sent to us, and every guide ends at the command line so you can do it on your own machine. The guides are now browsable by topic as well as by task.
noble-post-quantum: 18 findings, none in the primitives
We reviewed the most widely used pure-JavaScript post-quantum library twice, six days apart, and found eighteen defects. Not one of them is in the maths. The first round was merged in two hours; the second found twelve more in the repaired code; then the maintainer read our patches and found two defects in them.
The Dart NDK audit: a GPL-3.0 crate inside an MIT SDK
The most serious finding in our review of the Dart Nostr Development Kit was not cryptographic. It was a GPL-3.0-only crate inside an MIT-licensed SDK. Compiled into every application that depended on the SDK, whether or not that application used post-quantum code at all. All five findings are now fixed and shipped in ndk 0.9.0.
A post-quantum transition for Nostr identities
Every encrypted Nostr message published today is a future plaintext. We are proposing a NIP, jointly with nostr-wot, that lets an identity derive post-quantum keys from its seed phrase where it has a 24-word one - so those words still restore the identity after the transition. Accounts without one, which is most of them, generate an independent key that needs its own backup. It is implemented and running against public relays, not a design document: you can send a post-quantum encrypted message and take it apart layer by layer.
Cloudflare adds post-quantum authentication to origins
Cloudflare now supports post-quantum authentication between its edge and your origin server: Authenticated Origin Pulls and Custom Origin Trust Store both accept ML-DSA (FIPS 204) certificates. Paired with the X25519MLKEM768 key exchange already running on that hop, this is the first mainstream path to a fully post-quantum CDN-to-origin connection, not just the browser-to-edge leg.
Go 1.27 brings post-quantum signatures to the stdlib
Go 1.27, released this month, adds a crypto/mldsa package implementing ML-DSA (FIPS 204), plus ML-DSA support in crypto/x509 and crypto/tls. Post-quantum signatures are no longer a third-party dependency for Go services, they are a standard-library import. Here is what shipped and what it means for the migration.
Sieve: conformance testing ML-KEM and ML-DSA against the bugs that matter
Even a correct-looking post-quantum implementation can fail in the specific bug-class patterns we see repeatedly in audits. Sieve encodes those classes as targeted, reusable test batteries.
Turn quantum risk into a credential.
Book a discovery call and get an indicative scope and pricing for your organisation.