RFC 9881, "Internet X.509 Public Key Infrastructure -- Algorithm Identifiers for the Module-Lattice-Based Digital Signature Algorithm (ML-DSA)", October 2025

Errata ID: 8699
Status: Verified
Type: Technical
Publication Format(s) : TEXT, PDF, HTML
Reported By: Mrigank Pawagi
Date Reported: 2026-01-09
Verifier Name: Deb Cooley
Date Verified: 2026-02-11

Section Appendix A says:

ML-DSA-87-PublicKey ::= OCTET STRING (SIZE (2602))

It should say:

ML-DSA-87-PublicKey ::= OCTET STRING (SIZE (2592))

Notes:

The size value should be 2592, based on the definitions elsewhere in the document (e.g., Section 4). 

Report New Errata