IETF RFC 9881
[ACTIVE]
Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 91
- Abstract
- Digital signatures are used within X.509 certificates and Certificate Revocation Lists (CRLs), and to sign messages. This document specifies the conventions for using FIPS 204, the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) in Internet X.509 certificates and CRLs. The conventions for the associated signatures, subject public keys, and private key are also described.
- Publication Date
- 2025-10-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC9881- Link
- https://doi.org/10.17487/RFC9881
- Author(s)
- Jake MassimoPanos KampanakisSean TurnerBas Westerbaan
- Keyword(s)
- ML-DSA, X.509, PKIX
Latest version of IETF RFC 9881
Document Versions — IETF RFC 9881
-
▶ IETF RFC 9881 (2025-10-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- NIST.FIPS.204 — ML-DSA EXTERNAL
- NIST, "Computer Security Objects Register (CSOR)", 13 June 2025, <https://csrc.nist.gov/projects/computer-security-objects-register/algorithm-registration>. EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 5280 [Active, Amended*]
- IETF RFC 5912 [Active*]
- IETF RFC 5958 [Active*]
- IETF RFC 8174 [Active*]
- T-REC-X.680.2021 — ASN.1 EXTERNAL
- T-REC-X.690.2021 — X690 EXTERNAL
Bibliographic Reference(s)
- NIST, "Post-Quantum Cryptography (PQC)", 28 July 2025, <https://csrc.nist.gov/Projects/post-quantum-cryptography>. EXTERNAL
- Bai, S., Ducas, L., Kiltz, E., Lepoint, T., Lyubashevsky, V., Schwabe, P., Seiler, G., and D. Stehlé, "CRYSTALS-Dilithium Algorithm Specifications and Supporting Documentation (Version 3.1)", 8 February 2021, <https://pq-crystals.org/dilithium/data/dilithium-specification-round3-20210208.pdf>. EXTERNAL
- Lyubashevsky, V., "Fiat-Shamir with aborts: Applications to lattice and factoring-based signatures", International Conference on the Theory and Application of Cryptology and Information Security, 2009, <https://www.iacr.org/archive/asiacrypt2009/59120596/59120596.pdf>. EXTERNAL
- Cremers, C., Düzlü, S., Fiedler, R., Fischlin, M., and C. Janson, "BUFFing signature schemes beyond unforgeability and the case of post-quantum signatures", Cryptology ePrint Archive, Paper 2020/1525, October 2023, <https://eprint.iacr.org/archive/2020/1525/20231023:114351>. EXTERNAL
- IETF RFC 3647 [Active*]
- IETF RFC 7468 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9881.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9881, Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA). Available at https://doi.org/10.17487/RFC9881
Snippet:
IETF RFC 9881, Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA). Available at https://doi.org/10.17487/RFC9881
HTML (ISO 690 compliant)
Preview:
IETF RFC 9881, Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA). Available at https://doi.org/10.17487/RFC9881
Snippet:
<span class="citation"><cite>IETF RFC 9881</cite>, Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA). Available at <a href="https://doi.org/10.17487/RFC9881" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9881</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9881, Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)
doi: 10.17487/RFC9881
url: https://doi.org/10.17487/RFC9881
doi: 10.17487/RFC9881
url: https://doi.org/10.17487/RFC9881
Snippet:
<li> <cite id="bib-rfc9881">IETF RFC 9881</cite>, Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA) <span class="doi">10.17487/RFC9881</span> </li>
Referenced By
- IETF RFC 9958 [Active*]