DigiCert Labs
Experiment. Be ready.
Test drive the latest quantum ready certificates with DigiCert Labs. Use the latest standards and algorithms. Learn how to go from concept to deployment.
Generate post-quantum certificates
The legal stuff
This tool is provided as a beta service for evaluation and testing purposes only. Your use of the tool, including any certificates issued, is not intended for production use. Use at your own risk.
By using this tool, you agree that your use is subject to the terms of the DigiCert Master Services Agreement. DigiCert makes no warranties, express or implied, regarding the accuracy, reliability, or fitness for a particular purpose of this tool or any certificates issued as a result of using the tool.
For more information about how we handle your data, please refer to the DigiCert Privacy Policy.
PQC digital signature schemes
Take the guesswork out of which signature scheme is right for your needs. Learn more about the latest PQC signature schemes to determine which will best suit your experimental requirements.
COMPOSITE
Composite signatures are hybrid signature schemes that rely on the security of ML-DSA and a classical cryptographic scheme (ECC or RSA). It is being standardized by the IETF.
Start with MLDSA44-Ed25519. If you must use a hybrid it makes the most sense to use it with ECC (Ed25519) to keep the size lower.
CROSS
CROSS is a code-based digital signature scheme based on the restricted syndrome decoding problem.
Start with CROSS-RSDPG-128-BALANCED. It has enough security for most transactions and has the right tradeoff of size and speed.
FALCON
Fast-Fourier Lattice-based Compact Signatures over NTRU (Falcon) is a lattice-based digital signature scheme with small (for PQC) signatures and good performance. It is a bit complicated when it comes to signing so don't sign on devices that are susceptible to side-channel attacks.
Start with FALCON-512. It's small, it's fast, and provides more than enough security for most applications.
ML-DSA
ML-DSA (Module-lattice digital signature algorithm) is a lattice-based digital signature scheme based on the module learning with errors problem. It is standardized by NIST in FIPS 204.
Start with ML-DSA-44. PQC signatures are big so if security allows it, use the smallest one.
SLH-DSA
SLH-DSA (stateless hash-based digital signature algorithm) is a stateless hash-based digital signature scheme based on the difficulty of finding preimages of hash functions. It is standardized by NIST in FIPS 205.
Start with SLH-DSA-SHA2-128s. When a scheme is as conservative but slow as this scheme you might as well use the smallest signature.