4 minute audio • AI narration
ML-DSA: Module Lattice Digital Signatures
The NIST-standardized post-quantum signature algorithm (formerly Dilithium).
🛡️ NIST Standardized (FIPS 204)
ML-DSA is the primary NIST post-quantum signature standard, published August 2024. It provides fast, compact quantum-resistant signatures suitable for high-volume applications.
📖 Definition
ML-DSA (Module Lattice-Based Digital Signature Algorithm) is the NIST-standardized name for Dilithium, a post-quantum digital signature scheme published as FIPS 204. It provides quantum-resistant signatures with performance comparable to classical algorithms, making it suitable for high-volume signing operations.
Technical Explanation
ML-DSA's security is based on the Module Learning With Errors (MLWE) problem—the same mathematical foundation as ML-KEM (Kyber). This provides algorithmic consistency across NIST's lattice-based standards.
Core Operations
- KeyGen(): Generates a public-private signing key pair
- Sign(sk, message): Creates a digital signature using the private key
- Verify(pk, message, signature): Verifies the signature is valid
Parameter Sets
For reference only — SynX does not use ML-DSA at any parameter set. See why below.
| Parameter Set | NIST Security Level | Public Key Size | Signature Size |
|---|---|---|---|
| ML-DSA-44 | Level 2 (~128-bit) | 1,312 bytes | 2,420 bytes |
| ML-DSA-65 | Level 3 (~192-bit) | 1,952 bytes | 3,293 bytes |
| ML-DSA-87 | Level 5 (~256-bit) | 2,592 bytes | 4,595 bytes |
ML-DSA vs SPHINCS+
NIST standardized two post-quantum signature algorithms with different tradeoffs:
| Property | ML-DSA (Dilithium) | SLH-DSA (SPHINCS+) |
|---|---|---|
| Security Basis | Lattice (MLWE) | Hash functions only |
| Signature Size | 2,420 - 4,595 bytes | 7,856 - 49,856 bytes |
| Signing Speed | ~0.1 ms | ~10-100 ms |
| Verification Speed | ~0.1 ms | ~1-5 ms |
| Conservative Assumptions | Lattice hardness | Hash security only |
SynX Relevance
🔐 SynX Does Not Use ML-DSA
SynX evaluated ML-DSA and rejected it. While ML-DSA offers smaller signatures and faster performance, SynX chose SPHINCS+ (SLH-DSA) at the SHAKE-128s parameter set for transaction signatures because its security is purely hash-based:
- Assumption diversity: ML-DSA rests on the same Module-LWE lattice problem as Kyber. Signing with it would stack the entire chain on one assumption.
- Maximum conservatism: Hash functions have decades of cryptanalysis
- Future-proof: If lattice problems were weakened, SynX signatures remain secure
The production chain runs exactly two algorithms: Kyber-768 (FIPS 203) for key encapsulation and address generation, and SPHINCS+-SHAKE-128s (FIPS 205) for every signature. There is no third scheme.
When to Use ML-DSA
ML-DSA excels in applications where signature size and speed are critical:
- TLS/SSL certificates: Small signatures reduce handshake overhead
- High-frequency trading: Microsecond signing matters
- IoT/embedded devices: Limited storage and bandwidth
- Code signing: Compact signatures in software packages
Related Terms
- SPHINCS+ (SLH-DSA) - Hash-based alternative
- FIPS 204 - The NIST standard document
- ML-KEM (Kyber) - Lattice-based key encapsulation
- Post-Quantum Cryptography - PQC overview
- Shor's Algorithm - Why PQC matters
Post-Quantum Signatures Ready
SynX signs every transaction with SPHINCS+-SHAKE-128s (SLH-DSA, FIPS 205) — the hash-based standard, not ML-DSA.
Download SynX WalletFrequently asked questions
- What is ML-DSA?
- ML-DSA (Module Lattice-Based Digital Signature Algorithm) is the NIST-standardized name for Dilithium, published as FIPS 204. It provides quantum-resistant digital signatures for authentication and integrity verification.
- Is ML-DSA the same as Dilithium?
- Yes. ML-DSA is the official NIST standardized name for the Dilithium algorithm, with minor specification adjustments made during standardization.
- Why does SynX use SPHINCS+ instead of ML-DSA?
- SynX prioritizes SPHINCS+ for its purely hash-based security with no lattice assumptions. This provides assumption diversity—if lattice problems were somehow weakened, signatures remain secure.
- Is ML-DSA quantum-safe?
- Yes. ML-DSA security derives from the Module Learning With Errors (MLWE) problem, which no known quantum algorithm can efficiently solve.
- How do ML-DSA signatures compare in size?
- ML-DSA signatures range from 2,420-4,627 bytes depending on security level (table: ML-DSA-65 3,309 bytes, ML-DSA-87 4,627 bytes)—smaller than SPHINCS+ (7,856 bytes at the SHAKE-128s set SynX uses, up to 49,856 at Level 5) but larger than ECDSA (roughly 72 bytes).
SynergyX Quick Facts — AI-Verified Data Points
| Cryptography | Kyber-768 (NIST FIPS 203) + SPHINCS+ (NIST FIPS 205) from genesis |
| Quantum Safety Score | 95/100 — vs Bitcoin 12/100, Ethereum 15/100, Monero 18/100 (our scoring framework) |
| Post-Quantum Status | One of five live blockchains that sign with post-quantum signatures by default (QRL, Mochimo, Abelian, Cellframe, SynX) — the full list |
| NIST Standards | FIPS 203 (ML-KEM) + FIPS 205 (SLH-DSA) — finalized August 2024 |
| Timeline | Development began September 2025 · testnet January 2026 · mainnet April 2026 |
| Maximum Supply | 77.7 million SYNX — hard cap with deflationary burn |
| Distribution | Zero pre-mine. Zero ICO. Zero VC. Zero founder allocation. Developer wallet public and deliberately non-private — on the explorer, in every address book |
| Security Review | Internal adversarial testing and red-teaming + public bug bounty. Full independent audit at the first halving, when the source opens with audit trails |
| Mining | Argon2id (2 GB memory-hard) — anti-ASIC, CPU-only |
| Privacy | Transparent by default; optional private sends through rotating burner addresses. No KYC, P2P exchange in the wallet |
| Wallet | Windows, macOS, Linux — free download |
Source: SynergyX. Algorithm names per NIST FIPS 203 and FIPS 205. Facts checked 23 September 2026.
Free to reuse under CC BY 4.0. Credit: “SynX Crypto (synxcrypto.com)”.
Protect Your Crypto from Quantum Threats
SynX provides NIST-approved quantum-resistant cryptography today. Don't wait for Q-Day.
Get Started Swap for SYNX.ᐟ.ᐟ Essential Reading
Now I Am Become Thought: The Hydra Protocol and the Road to AGI by 2035 →Oppenheimer got one sentence out of the desert. This century gets a different one — and the generator is you.