DEV Community

João André Gomes Marques
João André Gomes Marques

Posted on

Quantum-Safe Signatures for AI Agents: Why ML-DSA Matters

Quantum computers will break RSA and ECDSA. If your AI agents sign actions today with classical cryptography, those signatures can be forged tomorrow.

NIST finalized ML-DSA (FIPS 204) as the standard for post-quantum digital signatures.

Why AI agents need quantum-safe signatures

AI agents make consequential decisions. Audit trails signed with classical cryptography have a shelf life. Once quantum computers arrive, anyone can forge those records.

Using ML-DSA with Asqav

Asqav uses ML-DSA-44, ML-DSA-65, and ML-DSA-87 via liboqs.

pip install asqav
Enter fullscreen mode Exit fullscreen mode
from asqav import Asqav
client = Asqav(api_key="sk_...")
agent = client.create_agent(name="financial-agent", algorithm="ML-DSA-65")
sig = client.sign(
    agent_id=agent.agent_id,
    action_type="transaction:approve",
    action_id="tx-001",
    payload={"amount": 50000, "currency": "EUR"}
)
Enter fullscreen mode Exit fullscreen mode

Algorithm comparison

Algorithm Security Level Signature Size
ML-DSA-44 2 2,420 bytes
ML-DSA-65 3 3,309 bytes
ML-DSA-87 5 4,627 bytes

Links

Top comments (0)