ML-DSA, short for Module-Lattice Digital Signature Algorithm, is a post-quantum digital signature scheme designed to resist attacks from both classical and future quantum computers. It was selected for modern cryptographic deployments because signatures are a core trust primitive: they prove that a certificate, software package, or policy document was issued by a trusted key holder.
In practice, ML-DSA matters anywhere X.509 certificates or certificate revocation lists must be signed. That includes PKI, TLS, and enterprise trust chains. Defenders test ML-DSA to see whether certificate authorities, client libraries, hardware modules, and validation code can handle new signature formats and larger objects without breaking interoperability or adding latency. Attackers benefit when organizations delay this testing, because incompatible certificate handling can cause outages, failed handshakes, or rushed rollback to weaker trust paths. ML-DSA is therefore both a cryptographic upgrade and an operational compatibility check.