Struct MlDsa65 

pub struct MlDsa65;

ML-DSA-65 parameter set (NIST security level 3).

Provides approximately 192 bits of classical security. Matrix dimensions are k=6, l=5 with eta=4.

Trait Implementations

impl Params for MlDsa65

const K: usize = 6

Number of rows in the matrix A (dimension k).

const L: usize = 5

Number of columns in the matrix A (dimension l).

const ETA: usize = 4

Secret key coefficient bound: coefficients of s1, s2 lie in [-eta, eta].

const TAU: usize = 49

Number of +/-1 entries in the challenge polynomial c.

const BETA: i32 = 196

Signing bound beta = tau * eta. Candidate signatures with infinity norm >= gamma1 - beta are rejected.

const GAMMA1: i32

Masking range: coefficients of the masking vector y are sampled from [-(gamma1-1), gamma1].

const GAMMA2: i32

Decomposition parameter: controls the rounding used in HighBits/LowBits.

const OMEGA: usize = 55

Maximum number of non-zero hint entries allowed across all k hint polynomials.

const LAMBDA: usize = 192

Collision strength in bits; determines the length of the commitment hash c_tilde (lambda/4 bytes).

const BITLEN_2ETA: usize = 4

Helper constant: bit-length of 2*eta, used for encoding secret polynomials.

const BITLEN_GAMMA1_MINUS1: usize = 19

Helper constant: bit-length of gamma1 - 1, used for encoding z in signatures.

const PK_LEN: usize = _

Public key length in bytes: 32 (rho) + k * 320 (encoded t1).

const SK_LEN: usize = _

Secret key length in bytes.

const SIG_LEN: usize = _

Signature length in bytes.