RFC 9964 - ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)

• Status: Proposed Standard
• Published: May 2026
• Stream: IETF
• Algorithms: ML-DSA-44, ML-DSA-65, ML-DSA-87
• Key Type: AKP

Abstract

This document specifies JOSE and COSE serializations for ML-DSA, a post-quantum digital signature scheme defined in US NIST FIPS 204. It also defines the generic AKP key type and registers ML-DSA algorithms for JOSE and COSE.

Contents

• 1. Introduction
• 2. Terminology
• 3. AKP Key Type
• 4. ML-DSA Private Keys
• 5. ML-DSA Algorithms
• 6. AKP Thumbprints
• 7. Security Considerations
• 8. IANA Considerations
• 9. References
• Appendix A. Examples

Related Resources

• Official Text: RFC 9964
• Official Page: RFC 9964 DataTracker
• Errata: RFC Editor Errata