Please stop hashing the public key first (or: ML-DSA's µ annoys me)
A goal one might have when designing a signing algorithm is to prevent signing a message one has not seen. Signing a message one hasn't seen might sound difficult at first, but most classical signature algorithms , as commonly used, sign a hash of the message, rather than the message itself. This ki…
blog.erincandescent.net