Browser-based demo of ML-DSA (FIPS 204) rejection sampling. Live iteration feed, rejection-reason breakdown, acceptance histograms, and the timing side-channel tradeoff — why variable signing time is a feature, not a bug.
cryptography constant-time post-quantum-cryptography rejection-sampling digital-signatures dilithium implementation-security crypto-lab crystals-dilithium ml-dsa ml-dsa-65 fips-204 lattice-signatures lattice-cryptography timing-side-channel fiat-shamir-with-aborts lyubashevsky
-
Updated
Apr 19, 2026 - TypeScript