The Hint Weight of ML-DSA Signatures Is Key-Dependent: An Empirical Study across the Three FIPS 204 Parameter Sets

Name: The Hint Weight of ML-DSA Signatures Is Key-Dependent: An Empirical Study across the Three FIPS 204 Parameter Sets
Uploaded: 2026-10-11T16:56:57.975211+00:00
Duration: 268 s
Description: The study investigated whether ML-DSA signatures' hint weights depend on the signing key. Findings show that while the total hint weight is weakly key-dependent (explaining 0.5% to 1.5% of variance), per-polynomial weights are strongly dependent on the key. This suggests a weak statistical fingerprint exists, but it does not endanger the secret signing key.

The study investigated whether ML-DSA signatures' hint weights depend on the signing key. Findings show that while the total hint weight is weakly key-dependent (explaining 0.5% to 1.5% of variance), per-polynomial weights are strongly dependent on the key. This suggests a weak statistical fingerprint exists, but it does not endanger the secret signing key.

Open the full episode