draft-miller-sshm-mldsa65-ed25519-composite-sigs

ML-DSA 65/Ed255192 Composite Signatures in SSH

groupnone stateactive pages7 rev00 expires2026-10-30 canonicalhttps://datatracker.ietf.org/doc/draft-miller-sshm-mldsa65-ed25519-composite-sigs/
This document specifies the integration of the MLDSA65-Ed25519-SHA512 composite signature scheme into the Secure Shell (SSH) protocol. This scheme combines the post-quantum Module-Lattice Digital Signature Algorithm (ML-DSA) with the classical elliptic curve Ed25519 signature algorithm to provide security against both quantum and classical adversaries.