You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+5-7Lines changed: 5 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -248,7 +248,7 @@ the PKCS #11 device and store it in a file in PEM format. With can then use:
248
248
249
249
#### Post-Quantum Cryptography with ML-DSA
250
250
251
-
Model signing supports post-quantum cryptographic signatures using **ML-DSA** (Module Lattice Digital Signature Algorithm), standardized as [NIST FIPS 204](https://csrc.nist.gov/publications/detail/fips/204/final) in August 2024. ML-DSA provides security against both classical and quantum computer attacks, making it suitable for long-term security requirements.
251
+
Model signing supports post-quantum cryptographic signatures using **ML-DSA** (Module Lattice Digital Signature Algorithm), standardized as [NIST FIPS 204](https://csrc.nist.gov/pubs/fips/204/final) in August 2024. ML-DSA provides security against both classical and quantum computer attacks, making it suitable for long-term security requirements.
252
252
253
253
To enable ML-DSA support, install the optional dependencies:
254
254
@@ -364,10 +364,10 @@ Note that ML-DSA signatures are significantly larger than traditional ECDSA sign
For more details, see the [ML-DSA implementation documentation](ML_DSA_IMPLEMENTATION.md).
395
-
396
394
#### OpenTelemetry Support
397
395
398
396
Model signing supports optional distributed tracing and observability through OpenTelemetry. This allows you to monitor signing operations, track performance, and integrate with observability platforms.
-**Security**: Report security issues to security@sigstore.dev
706
-
-**ML-DSA Spec**: [NIST FIPS 204](https://csrc.nist.gov/publications/detail/fips/204/final)
707
-
708
-
## Conclusion
709
-
710
-
ML-DSA provides quantum-resistant signatures for long-term model integrity protection. While the keys and signatures are larger than traditional methods, they ensure your models remain secure even against future quantum computers.
711
-
712
-
For most use cases, we recommend:
713
-
-**ML-DSA-65** for production models
714
-
-**Password-protected keys** for enhanced security
715
-
-**CI/CD integration** for automated signing
716
-
-**Regular key rotation** (annually or as needed)
717
-
718
-
Start with the basic examples and gradually adopt advanced features as your security requirements evolve.
0 commit comments