NIST FIPS 204 & CRYSTALS-Dilithium
FIPS 204 is the U.S. National Institute of Standards and Technology's Module-Lattice-Based Digital Signature Standard, published in August 2024, which formally standardizes the ML-DSA algorithm derived from the CRYSTALS-Dilithium submission to NIST's post-quantum cryptography competition. It's the technical and regulatory basis for Certivu's use of ML-DSA — this page covers the standardization process and lattice-cryptography foundations in more depth than the ML-DSA glossary entry.
How FIPS 204 came to be
NIST opened a public call for post-quantum cryptographic algorithm submissions in 2016, running a multi-round public evaluation process in which cryptographers worldwide were invited to submit, analyze, and attack candidate algorithms. CRYSTALS-Dilithium, one of the lattice-based signature submissions, was among the algorithms NIST announced for standardization in 2022; after further refinement, NIST published the finalized standard as FIPS 204, "Module-Lattice-Based Digital Signature Standard," in August 2024, renaming the standardized algorithm ML-DSA in the process. See post-quantum cryptography for the broader context of NIST's PQC effort.
The lattice-cryptography basis
ML-DSA's security rests on module lattice problems — geometric problems involving points arranged in a highly structured, high-dimensional grid, where finding certain short vectors or solving a variant of the Learning With Errors (LWE) problem is believed to be computationally hard. Unlike integer factoring (RSA) or elliptic-curve discrete logarithms (ECDSA), no efficient algorithm, classical or quantum, is currently known for these lattice problems, which is why NIST selected lattice-based schemes as its primary post-quantum signature standard.
What FIPS status means in practice
A FIPS designation makes ML-DSA a formally approved standard for U.S. federal government use and gives it the kind of public, peer-reviewed scrutiny that underpins trust in widely deployed cryptography — the same status RSA and the elliptic-curve standards have held for decades. Certivu uses ML-DSA as standardized in FIPS 204, not a pre-standardization or modified variant of Dilithium, for every signature it produces.
Source: NIST FIPS 204, Module-Lattice-Based Digital Signature Standard
FAQ
Is ML-DSA exactly the same as CRYSTALS-Dilithium?
Essentially yes, with minor parameter and encoding refinements made during NIST's standardization process. ML-DSA is the official, standardized name for the algorithm that began as the CRYSTALS-Dilithium submission.
How long did it take NIST to finalize FIPS 204?
NIST's post-quantum cryptography standardization effort began with a public call for submissions in 2016, selected Dilithium for standardization in 2022, and published the finalized FIPS 204 standard in August 2024 — roughly eight years of public, multi-round cryptanalysis.
What problem makes lattice cryptography hard to break, even for a quantum computer?
ML-DSA relies on problems like finding short vectors in a structured, high-dimensional lattice, or solving a variant of the Learning With Errors (LWE) problem. Unlike the factoring and discrete-logarithm problems behind RSA and ECDSA, no known algorithm, including those designed for quantum computers, solves these lattice problems efficiently.