Update on end-to-end PKI and HSM integrations with ML-DSA

At last years PQC Conference we benchmarked Hardware Securtiy Modules with Dilithium. Now that FIPS-204 is released, it is time to forget about Dilithium and do production level integrations using ML-DSA. This session shows PKI application integration for issuing certificates, with a number of HSMs that are ready for ML-DSA. We will highlight how easy, or hard, it is to integrate using PKCS#11 or REST APIs. Of course there will be benchmarks of certificate issuance comparing ML-DSA against classic algorithms. Let’s see what else we are able to squeeze in until January. - *Tomas Gustavsson* - Chief PKI Officer at Keyfactor @KeyfactorSecure