ML-DSA-87 (Module-Lattice-Based Digital Signature Algorithm, 87 parameter set) as specified in NIST FIPS 204.
This is a post-quantum signature scheme providing NIST security category 5, which is roughly equivalent to the security of SHA-512 or AES-256.
Key sizes:
This parameter set offers the highest security level among the three ML-DSA variants, suitable for applications requiring maximum security assurance.
pub const MLDSA87 = MLDSAImpl(.
pub const MLDSA87 = MLDSAImpl(.{
.name = "ML-DSA-87",
.k = 8,
.l = 7,
.eta = 2,
.omega = 75,
.tau = 60,
.gamma1_bits = 19,
.gamma2 = 261888, // (Q-1)/32
.tr_size = 64,
.ctilde_size = 64,
})