Cryptography & Post-Quantum› ML-DSA in Depth›Deterministic or Hedged: What the rnd Input Changes When an Attacker Can Fault the Signer

In this series

ML-DSA in Depth

1What the ML-DSA Proof Actually Rests On: MLWE, SelfTargetMSIS and the Quantum Random OracleResearch
2Strong Unforgeability and the Hint: Why a Byte-Exact Signature Matters for Logs, Tokens and LedgersResearch
3Deterministic or Hedged: What the rnd Input Changes When an Attacker Can Fault the SignerResearch
4Pure, Pre-Hash or External Mu: Splitting an ML-DSA Signature Across a Hardware BoundaryResearch
5ML-DSA in Certificates and Tokens: Key Formats, Composites and What the RFCs Leave to YouResearch

← All research

HostExpert

Murali Chillakuru

Press play to begin the walkthrough.

0:00

12:06

ML-DSA in Depth · 3 / 5

Deterministic or Hedged: What the rnd Input Changes When an Attacker Can Fault the Signer

Back