Struct MlDsa87 

pub struct MlDsa87;

ML-DSA-87 parameter set (NIST security level 5).

Provides approximately 256 bits of classical security. Matrix dimensions are k=8, l=7 with eta=2.

Trait Implementations

impl Params for MlDsa87

const K: usize = 8

Number of rows in the matrix A (dimension k).

const L: usize = 7

Number of columns in the matrix A (dimension l).

const ETA: usize = 2

Secret key coefficient bound: coefficients of s1, s2 lie in [-eta, eta].

const TAU: usize = 60

Number of +/-1 entries in the challenge polynomial c.

const BETA: i32 = 120

Signing bound beta = tau * eta. Candidate signatures with infinity norm >= gamma1 - beta are rejected.

const GAMMA1: i32

Masking range: coefficients of the masking vector y are sampled from [-(gamma1-1), gamma1].

const GAMMA2: i32

Decomposition parameter: controls the rounding used in HighBits/LowBits.

const OMEGA: usize = 75

Maximum number of non-zero hint entries allowed across all k hint polynomials.

const LAMBDA: usize = 256

Collision strength in bits; determines the length of the commitment hash c_tilde (lambda/4 bytes).

const BITLEN_2ETA: usize = 3

Helper constant: bit-length of 2*eta, used for encoding secret polynomials.

const BITLEN_GAMMA1_MINUS1: usize = 19

Helper constant: bit-length of gamma1 - 1, used for encoding z in signatures.

const PK_LEN: usize = _

Public key length in bytes: 32 (rho) + k * 320 (encoded t1).

const SK_LEN: usize = _

Secret key length in bytes.

const SIG_LEN: usize = _

Signature length in bytes.