Soatok DreamseekerI'm quite amused that ML-DSA-44 public keys are 1312 bytes.
GothPanda@soatok that... That can't be a coincidence, can it?
@gothpanda I mean, it's a 32 byte commitment from the private key and 1280 bytes of the upper bits of vector t (where t = A*s + e, with e being an error vector).
For larger parameter sizes (-65, -87), the second segment is larger but the commitment remains 32 bytes.