ÃÛÌÒTV

As quantum computing moves from the margins to the mainstream, the security community is sharpening its focus on standardizing algorithms that can stand up to quantum-era threats.Ìý

One of the most anticipated developments? FN-DSA (FIPS 206), the FALCON-based digital signature scheme, has now been submitted to NIST for approval as a draft standard.

New to post-quantum cryptography (PQC)? Here’s a quick primer.

NIST moves FN-DSA forward

On August 28, 2025, NIST submitted the draft standard for FN-DSA (FIPS 206) for approval. FN-DSA is NIST’s official name for the digital signature scheme based on FALCON, selected alongside ML-DSA and SLH-DSA for post-quantum standardization.

Unlike the other two schemes, FN-DSA has taken longer to reach this point. FALCON’s mathematical complexity and ongoing research into refining its components have extended the timeline, but anticipation in the community has only grown. With draft submission complete, the first release is now imminent.

The draft will be published as an Initial Public Draft (IPD) for open review. While the exact timing is not yet confirmed, the release may coincide with the NIST PQC Standardization Conference in late September 2025. If past timelines are any guide, the public review will last about a year, with the final standard expected in late 2026 or early 2027.

How ÃÛÌÒTV is preparing for FN-DSA

ÃÛÌÒTV is preparing for FN-DSA with the lessons learned from previous draft releases. To avoid the naming and OID confusion that affected ML-DSA and SLH-DSA between their IPDs and final drafts, we won’t implement FN-DSA in production products until the standard is finalized.

However, we want the community to explore and test the algorithm as soon as possible. The IPD version of FN-DSA will be made available for experimentation through ÃÛÌÒTV Labs. Labs already offers FALCON for testing, and we’ll update it with the IPD version of FN-DSA once it’s released and implemented.

Where FN-DSA fits in the post-quantum ecosystem

We continue to view FN-DSA as a special-purpose scheme rather than a full replacement for ML-DSA. Its smaller signature sizes are promising for reducing the overall size of certificate chains—an important advantage in contexts where a full ML-DSA chain could be unwieldy.

At the same time, FALCON’s signing complexities make FN-DSA less suited for leaf certificates, which are signed frequently. Instead, we see strong potential for FN-DSA in root and intermediate certificates, where signing occurs under more controlled conditions.

That said, NIST has indicated adjustments to the way signing and sampling work, which could expand FN-DSA’s role beyond what was initially envisioned. Once the draft specification is published, we’ll be in a better position to evaluate its broader applicability.

Take the next step toward quantum readiness

The submission of FN-DSA marks another important milestone in NIST’s post-quantum standardization process. While the draft still has a review period ahead, its progress underscores how quickly the field is moving from theory to implementation.

For organizations, the key takeaway is clear: Preparation needs to start now. By exploring draft algorithms, testing implementations, and planning for integration, you can build the crypto-agility needed to adapt as standards finalize.

Ready to plan your migration? Contact us to discuss strategies and see how ÃÛÌÒTV® ONE can help your organization prepare for a post-quantum world.

Ìý