ML-DSA-87 (FIPS 204 Level 5) Parameter Tier
Parameter-tier sub-spec for ML-DSA-87 (NIST FIPS 204 security level 5), the maximum-security lattice signature variant. Algorithm definition deferred to LP-4400.
Implementation status (code-audited 2026-07-03): SHIPPED FIPS 204 parameters (k8/l7/eta2/tau60) confirmed against luxfi/crypto/mldsa (circl v1.6.3).
Abstract
ML-DSA-87 is the NIST FIPS 204 security-level-5 parameter set of the Module-Lattice-Based Digital Signature Algorithm. This LP pins the tier identifier, parameter constants (k=8, l=7, eta=2, tau=60, beta=120, gamma1=2^19, gamma2=(q-1)/32, omega=75), and the implementation pointer; the algorithm itself is defined in LP-4400. Sizes: public key 2,592 B, secret key 4,896 B, signature 4,627 B. Use ML-DSA-87 for long-lived institutional signing keys (custody operations, treasury authorization, governance multisig members under the highest classification) where the 256-bit classical / 192-bit post-quantum security margin is required. For network defaults use ML-DSA-65 (LP-4420).
Reference implementation
- Primitive:
luxfi/crypto/mldsa/mldsa87 - Test vectors: NIST KAT vectors (FIPS 204 Appendix A)
Provenance
Originally LP-4330, renumbered 2026-05-18 to consolidate all cryptographic primitives into the 4xxx range with family sub-ranges (PQ lattice signatures 4400-4499). This slot (4430) was formerly SLH-DSA-256; that content moved to LP-4530. The 4330 slot is retained as a permanent pointer to this LP.
Copyright
Copyright and related rights waived via CC0.