|
Item |
Value |
|---|---|
|
ML-DSA-65 OID |
id-ml-dsa-65 = 2.16.840.1.101.3.4.3.18 |
|
ML-DSA key generation mechanism (PKCS#11 CKM) |
0xFFFFFFFFC0A50001 (64-bit sign-extended) |
|
ML-DSA signing mechanism (PKCS#11 CKM) |
0xFFFFFFFFC0A53001 |
|
a5 ML module VDM type enumeration |
44→1 / 65→2 / 87→3 |
|
Key generation mechanism parameter (VDM serialization, big endian) |
MLDSA_KEYGEN{ flags(u4)=1, type(u4)=<enum>, attrs(v2), seed(*) } |
|
ML-DSA-65 sizes (FIPS 204) |
Public key: 1952 B / Private key: 4032 B / Signature: 3309 B |
|
Token CKA label (default) |
CryptoServer PKCS11 Token |
|
Post-quantum firmware modules |
a5 ML (FIPS 204/203) / a6 PQMI / a2 HBS |
|
Cryptographic User privilege bit |
0x02 |
|
User PIN length |
8–255 |
|
Minimum system OpenSSL |
3.5 (server and client) |
|
Expected TLS negotiation |
TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / id-ml-dsa-65 |
|
Environment variables |
CS_PKCS11_R3_CFG, STOA_ENCRYPTION_KEY, STOA_HSM_CKM_ML_DSA_65, STOA_ADMIN_KEY |
Quick Reference