ML-DSA for JSON Object Signing and Encryption and CBOR Object Signing and Encryption
RFC 9964, “ML-DSA for JSON Object Signing and Encryption and CBOR Object Signing and Encryption”, is a Proposed Standard document published in May 2026 by M. Prorock, O. Steele. The canonical text is published by the RFC Editor.
Abstract
This document specifies JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE) serializations for the Module-Lattice-Based Digital Signature Standard (ML-DSA), a Post-Quantum Cryptography (PQC) digital signature scheme defined in US NIST FIPS 204.
What “Proposed Standard” means
An entry-level standards-track specification: stable, peer-reviewed and a solid basis for implementation, though it may still evolve before becoming an Internet Standard.
The canonical text of RFC 9964 is hosted at rfc-editor.org. Available in HTML,TXT,PDF,XML.
- RFC 9963 Legacy RSASSA-PKCS1-v1_5 Code Points for TLS 1.3
- RFC 9965 The eap.arpa
- RFC 9962 A Decentralized Locator/ID Separation Protocol Mapping System
- RFC 9966 Bootstrapped TLS Authentication with Proof of Knowledge
- RFC 9961 MPLS Segment Routing Point-to-Multipoint Policy Ping
- RFC 9967 System for Cross-Domain Identity Management Profile for Security Event Tokens
- RFC 9960 Segment Routing Point-to-Multipoint Policy
- RFC 9968 Report from the IAB Workshop on the Next Era of Network Management Operations