ML-DSA
FIPS 204Formerly known as CRYSTALS-Dilithium
The lattice-based signature scheme most jurisdictions recommend alongside ML-KEM, generally preferred over the still-less-mature FN-DSA/Falcon.
Approved or recommended by
ML-DSA-87
ML-DSA-87 required for all classification levels on National Security Systems.
“Use ML-DSA-87 for all classification levels.”NSA CNSA Suite 2.0 and Quantum Computing FAQ (Dec 2024) →
ML-DSA-44 · ML-DSA-65 · ML-DSA-87
CA keys: ML-DSA-65 or 87; end-entity: ML-DSA-44.
Instrução Normativa ITI nº 35 (30 Jan 2026), DOC-ICP-01.01 v6.0 →ML-DSA-65 (until 2030) · ML-DSA-87 (no sunset stated)
ML-DSA-44 is not approved at all. ML-DSA-65 and ML-DSA-87 are approved, but ML-DSA-65 "will not be approved beyond 2030," the same sunset applied to ML-KEM-768 — ASD's approved list narrows toward the strongest parameter set only, on a fixed date.
“The use of ML-DSA-65 and ML-DSA-87 are approved. However, for interoperability and maintainability reasons, ML-DSA-65 will not be approved beyond 2030.”ASD Information Security Manual, Guidelines for Cryptography →
ML-DSA-65
NCSC, "Next steps in preparing for post-quantum cryptography" →Hybridation with a classical signature required for products seeking a French security visa.
ANSSI views on the Post-Quantum Cryptography transition (2023 follow-up) →ML-DSA-65 · ML-DSA-87
Hedged deployment recommended; hybrid with a classical signature.
BSI TR-02102-1, Version 2026-01 →ML-DSA-87 recommended · ML-DSA-65 acceptable
Preferred over FN-DSA; deployed hybrid with ECDSA/EdDSA.
“We currently recommend the usage of ML-DSA and SLH-DSA over FN-DSA.”The PQC Migration Handbook, 2nd edition (Dec 2024) →
Hybridisation recommended for lattice-based signatures.
CCN-TEC 009 BP/37 (July 2026) →“Recommended ... Digital Signature: FIPS-204 (CRYSTALS-Dilithium)”TEC 910018:2025, Technical Report: Migration to Post Quantum Cryptography (January 2025) →
ML-DSA-44 · ML-DSA-65 · ML-DSA-87
AKSA MySEAL 2.1 Approved algorithm list →This page lists only jurisdictions we have researched and where a primary source names a position on ML-DSA specifically. Absence from this list is not evidence a country prohibits or ignores it -- see that country's page directly.