That is explained by Ivan Ristic (Red Sift).
From the blogpost:
“Post-quantum signature sizes are up to 34x larger than ECDSA. Here’s why ML-DSA certificate chains blow past the 14.5 KB TCP congestion window. […]
In the following table, we compare the key aspects of ML-DSA to those of traditional cryptography. We show values for the common algorithms and strengths we normally see in leaf certificates and intermediates, which use stronger cryptography. We focus only on ML-DSA because that’s our main bet at the moment. If you’d like to understand what other algorithms look like, head over to the PQC Signature Zoo. […]”
| Algorithm | Public Key Size (bytes) | Signature Size (bytes) |
| RSA 2028 | 272 | 256 |
| RSA 3072 | 422 | 384 |
| RSA 4096 | 550 | 512 |
| ECDSA / P-256 | 65 | 72 |
| ECDSA / P-384 | 97 | 104 |
| ML-DSA-44 | 1,312 | 2,420 |
| ML-DSA-65 | 1,952 | 3,309 |
| ML-DSA-87 | 2,592 | 4,627 |
(Table reproduced from the blogpost)
- The above mentioned PQC Signature Zoo from PQShield can be found here: https://pqshield.github.io/nist-sigs-zoo/
- Read the full post here (origin of text): https://redsift.com/blog/post-quantum-signature-sizes
- Foto von Anton Maksimov 5642.su auf Unsplash