Post #4112337
2026-07-26 11:50 UTC
It's not my usual beat, but I wrote a pure-Python ML-DSA verifier.
pip install mldsa
It's 350 lines, CC0/0BSD, single-file, no dependencies, and thoroughly tested.
Signature verification handles no secrets, so it doesn't need to be constant-time.
https://words.filippo.io/mldsa-py/
Replies (1)
-
@entronid@infosec.exchange 2026-07-26 14:47
@filippo@abyssdomain.expert "However, a signature verifier involves no secrets" you never know what people will do with cryptography :)