Post-quantum security

ML-DSA

Also known as: Dilithium, FIPS 204

ML-DSA, standardized as FIPS 204, is the primary NIST post-quantum digital signature algorithm, based on module lattices. It is the leading candidate to replace ECDSA and EdDSA for blockchain and infrastructure signatures as networks migrate ahead of the 2030 deprecation timeline.

Readiness for lattice signatures in custody

Tier-1 HSMs already support ML-DSA within their certified hardware boundary, so HSM-based custody can adopt it as blockchains do. Threshold MPC protocols for ML-DSA are recent, from 2025 and 2026 research, and not production-validated, one reason sovereignty-first architectures avoid MPC dependency.

Taurus includes ML-DSA in its key management policies and co-launched an open-source initiative with the creators of the BLAKE3 hash function to accelerate post-quantum signature performance.

ML-DSA, explained

Can blockchains use ML-DSA today?
Only when the network validates it; most chains still accept classical signatures only. Custody readiness means being able to sign with ML-DSA the moment a chain switches, which HSM-based platforms support now.

Talk to our experts →

Post-quantum security

ML-DSA

Also known as: Dilithium, FIPS 204

ML-DSA, standardized as FIPS 204, is the primary NIST post-quantum digital signature algorithm, based on module lattices. It is the leading candidate to replace ECDSA and EdDSA for blockchain and infrastructure signatures as networks migrate ahead of the 2030 deprecation timeline.

Readiness for lattice signatures in custody

Tier-1 HSMs already support ML-DSA within their certified hardware boundary, so HSM-based custody can adopt it as blockchains do. Threshold MPC protocols for ML-DSA are recent, from 2025 and 2026 research, and not production-validated, one reason sovereignty-first architectures avoid MPC dependency.

Taurus includes ML-DSA in its key management policies and co-launched an open-source initiative with the creators of the BLAKE3 hash function to accelerate post-quantum signature performance.

ML-DSA, explained

Can blockchains use ML-DSA today?
Only when the network validates it; most chains still accept classical signatures only. Custody readiness means being able to sign with ML-DSA the moment a chain switches, which HSM-based platforms support now.

Talk to our experts →

Brand

Post-quantum security

ML-DSA

Also known as: Dilithium, FIPS 204

ML-DSA, standardized as FIPS 204, is the primary NIST post-quantum digital signature algorithm, based on module lattices. It is the leading candidate to replace ECDSA and EdDSA for blockchain and infrastructure signatures as networks migrate ahead of the 2030 deprecation timeline.

Readiness for lattice signatures in custody

Tier-1 HSMs already support ML-DSA within their certified hardware boundary, so HSM-based custody can adopt it as blockchains do. Threshold MPC protocols for ML-DSA are recent, from 2025 and 2026 research, and not production-validated, one reason sovereignty-first architectures avoid MPC dependency.

Taurus includes ML-DSA in its key management policies and co-launched an open-source initiative with the creators of the BLAKE3 hash function to accelerate post-quantum signature performance.

ML-DSA, explained

Can blockchains use ML-DSA today?
Only when the network validates it; most chains still accept classical signatures only. Custody readiness means being able to sign with ML-DSA the moment a chain switches, which HSM-based platforms support now.

Talk to our experts →

Brand

Post-quantum security

ML-DSA

Also known as: Dilithium, FIPS 204

ML-DSA, standardized as FIPS 204, is the primary NIST post-quantum digital signature algorithm, based on module lattices. It is the leading candidate to replace ECDSA and EdDSA for blockchain and infrastructure signatures as networks migrate ahead of the 2030 deprecation timeline.

Readiness for lattice signatures in custody

Tier-1 HSMs already support ML-DSA within their certified hardware boundary, so HSM-based custody can adopt it as blockchains do. Threshold MPC protocols for ML-DSA are recent, from 2025 and 2026 research, and not production-validated, one reason sovereignty-first architectures avoid MPC dependency.

Taurus includes ML-DSA in its key management policies and co-launched an open-source initiative with the creators of the BLAKE3 hash function to accelerate post-quantum signature performance.

ML-DSA, explained

Can blockchains use ML-DSA today?
Only when the network validates it; most chains still accept classical signatures only. Custody readiness means being able to sign with ML-DSA the moment a chain switches, which HSM-based platforms support now.

Talk to our experts →