pqcstatus
Algorithm

DSA: quantum risk, deadlines and replacements

Quantum-vulnerable

Legacy finite-field signature algorithm. No longer approved by NIST for generating signatures.

At a glance

Quantum riskQuantum-vulnerable
Used forDigital signature
Post-quantum algorithmNo

Positions and deadlines by authority

AuthorityPositionEffectiveScopeDetails
NISTDisallowedin forceall variantsFIPS 186-5: signature generation no longer approved; verification of existing signatures only.

Recommended replacements

Sources

  1. FIPS 186-5 — Digital Signature Standard (DSS) · NIST

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Is DSA quantum-safe?

No. DSA is broken by Shor’s algorithm on a sufficiently large quantum computer, whatever the key size. Data protected today can be recorded now and decrypted later.

What should replace DSA?

ML-DSA.