HSM / PKCS#11 / Hybrid Signature Spectrums

What you will do: Choose Concatenation, Nesting or Silithium (Fused), then Generate Key Pairs, Sign the message and Verify to see whether the EC-Schnorr and ML-DSA-65 halves still verify once stripped apart.

Worked example: Concatenation verifies but both halves strip cleanly (Separable); with Silithium the Verification Results show EC-Schnorr alone and ML-DSA alone as Blocked, and Recombination Attack tries to reassemble the parts.

Runtime and privacy: The cryptographic exercise runs in this browser. Review the site privacy terms before entering sensitive material; use synthetic inputs for learning and evaluation.

Browse all Crypto Lab tools · Learn with Hybrid Cryptography

For your role

Developer / Engineer

Choose Concatenation, Nesting or Silithium (Fused), then Generate Key Pairs, Sign and Verify on your message: the PKCS#11 trace shows the ML-DSA-65 calls through softhsmv3 and the description says whether a component signature can be stripped and verified alone.

Security Architect

The three modes differ in non-separability: concatenation offers none, nesting weak, Silithium strong; the Why hybrid signatures? panel and each mode's IETF reference are the basis for choosing one for a migration-period certificate.

Researcher / Academic

Sign the same message under all three constructions and compare signature layouts: the trace and the descriptions let you reproduce each composition and its separability property.

Certification & Validation Engineer

Sign one message under Concatenation, Nesting and Silithium (Fused): the PKCS#11 trace isolates the ML-DSA-65 calls — the primitive that algorithm testing covers — from the composition wrapped around them.