ML-DSA-44

Named by 4 kept items in this workspace.

3 items name it under affected products and 1 under tools.

Search every workspace for ML-DSA-44. It matches the name as written, so it can find other things that share it.

The items that name it 4

Unshuffling Fisher-Yates: Practical Recovery of Length-128 Permutations and Application to ML-DSA
paperas affected products2026-10-27It is written here as ML-DSA-44 (shuffled NTT software implementation; secret polynomial s1 recovered).
shuffled NTT software implementation; secret polynomial s1 recovered
Fault-Induced Nonce Repetition in Threshold Lattice Signatures: A Reveal-Structure Criterion, Cross-Scheme Analysis, and Detection Boundaries
paperas affected products2026-10-20It is written here as ML-DSA-44: full-key recovery threshold under imperfect faults is 768+ceil(256/K), 896 at K=2 and 787 at K=14.
256/K
Shorter Hash-Based Signatures via Guarded Sharing in a DAG Model
paperas tools2026-10-16It is written here as ML-DSA-44 (standardized module-lattice signature scheme with 2,420-byte signatures, used as comparison).
standardized module-lattice signature scheme with 2,420-byte signatures, used as comparison
On the Expected Number of Iterations in ML-DSA Signing: A Complete Accounting of the Rejection Conditions
paperas affected products2026-10-12It is written here as ML-DSA-44 (FIPS 204; corrected expected signing iterations 4.36).
FIPS 204; corrected expected signing iterations 4.36

All technologies in this workspace.