arXiv:2610.10992v1 Announce Type: new Abstract: Every ML-DSA (FIPS 204) signature carries a public hint vector h. We find that the Hamming weight of each hint polynomial h_k depends on the signing key: to first order it measures the Euclidean norm of (t0)_k, the low-order part of t that key generation leaves out of the public key.

Read the full article at arXiv cs.CR →