5. ML-DSA Algorithms
The registered algorithms are ML-DSA-44, ML-DSA-65, and ML-DSA-87. Their FIPS 204 sizes are preserved here:
| Algorithm | Private Key | Public Key | Signature Size |
|---|---|---|---|
| ML-DSA-44 | 2560 | 1312 | 2420 |
| ML-DSA-65 | 4032 | 1952 | 3309 |
| ML-DSA-87 | 4896 | 2592 | 4627 |
For ML-DSA-44, ML-DSA-65, and ML-DSA-87, the ctx parameter MUST be the empty string. HashML-DSA is not specified or registered by this RFC.