Back to Blog

NIST FIPS 203 vs FIPS 204 vs FIPS 205: Which Post-Quantum Standard Does What?

In August 2024 NIST published three landmark standards that define the future of cryptography: FIPS 203, FIPS 204, and FIPS 205. Together they form the complete post-quantum cryptographic toolkit that the US federal government mandates for all new systems. Understanding the difference between them is essential for evaluating any project claiming quantum resistance — because a project using the wrong standard for the wrong purpose is not actually secure. BMIC implements FIPS 203 and FIPS 204. Here is the complete breakdown.

FIPS 203: ML-KEM (CRYSTALS-Kyber) — Key Encapsulation

FIPS 203 standardises ML-KEM, the Module Lattice Key Encapsulation Mechanism, formerly known as CRYSTALS-Kyber. Key encapsulation is the mechanism used to establish a shared secret between two parties — it replaces RSA key exchange and ECDH in post-quantum systems. Three parameter sets are defined: ML-KEM-512 (Security Level 1, AES-128 equivalent), ML-KEM-768 (Security Level 3, AES-192 equivalent — used by BMIC), ML-KEM-1024 (Security Level 5, AES-256 equivalent). The mathematical foundation is the Module Learning With Errors (MLWE) problem. Public key size for ML-KEM-768: 1,184 bytes. Ciphertext size: 1,088 bytes. No known quantum algorithm efficiently solves MLWE.

FIPS 204: ML-DSA (CRYSTALS-Dilithium) — Digital Signatures

FIPS 204 standardises ML-DSA, the Module Lattice Digital Signature Algorithm, formerly known as CRYSTALS-Dilithium. Digital signatures authenticate transactions — they replace ECDSA in post-quantum systems. Three parameter sets: ML-DSA-44 (Security Level 2), ML-DSA-65 (Security Level 3 — used by BMIC), ML-DSA-87 (Security Level 5). Mathematical foundation: Module Learning With Errors and Module Short Integer Solution (MSIS). Signature size for ML-DSA-65: 3,293 bytes versus ECDSA’s 64 bytes. Verification is fast — comparable to ECDSA in benchmarks. This is the algorithm that replaces ECDSA for signing every BMIC wallet transaction.

FIPS 205: SLH-DSA (SPHINCS+) — Stateless Hash-Based Signatures

FIPS 205 standardises SLH-DSA, based on SPHINCS+. This is a hash-based signature scheme — its security relies purely on the collision resistance of hash functions rather than lattice problems. BMIC does not use FIPS 205, and for good reasons: signature sizes are very large (7,856 to 49,856 bytes depending on parameter set), signing is significantly slower than ML-DSA, and SPHINCS+ is designed as a conservative backup option for environments where lattice cryptography is unavailable or untrusted. FIPS 205 is primarily targeted at firmware signing and certificate authorities where signature size and speed are less critical than conservative security assumptions.

Why BMIC Uses FIPS 203 + FIPS 204 (Not FIPS 205)

StandardAlgorithmPurposeBMIC Uses?Why
FIPS 203ML-KEM-768Key encapsulation — establishes shared secrets✅ YesPrimary KEM standard. Best performance/security balance. Replaces ECDH.
FIPS 204ML-DSA-65Digital signatures — authenticates transactions✅ YesPrimary signature standard. Replaces ECDSA. Practical signature sizes.
FIPS 205SLH-DSAHash-based signatures — conservative backup❌ NoSignature sizes too large for on-chain use. Slower signing. Designed for firmware/CA use cases.

The NIST Selection Process: Seven Years of Global Evaluation

NIST began the Post-Quantum Cryptography standardisation process in 2016 after soliciting algorithms globally. 82 initial submissions from cryptographers worldwide were received. Multiple rounds of evaluation, cryptanalysis, and public comment followed over seven years. CRYSTALS-Kyber and CRYSTALS-Dilithium were selected as primary standards in 2022 and finalised as FIPS 203 and FIPS 204 in August 2024. The selection criteria: security against both classical and quantum adversaries, performance on real hardware, implementation simplicity, and resistance to side-channel attacks. No significant vulnerability has been found in either algorithm despite years of concerted global cryptanalysis. This is the gold standard of cryptographic vetting. BMIC implements both primary standards. Presale $0.049999 at bmic.ai.

Frequently Asked Questions

What is FIPS 203?
The NIST standard for ML-KEM (CRYSTALS-Kyber) — the primary post-quantum key encapsulation mechanism. Replaces RSA and ECDH for key exchange. Published August 2024. BMIC uses ML-KEM-768 (Security Level 3).

What is FIPS 204?
The NIST standard for ML-DSA (CRYSTALS-Dilithium) — the primary post-quantum digital signature algorithm. Replaces ECDSA for transaction signing. Published August 2024. BMIC uses ML-DSA-65 (Security Level 3).

What is the difference between FIPS 203 and FIPS 204?
FIPS 203 (ML-KEM) handles key encapsulation — establishing shared secrets. FIPS 204 (ML-DSA) handles digital signatures — authenticating transactions. Both are needed for a complete PQC system. BMIC implements both.

Why doesn’t BMIC use FIPS 205?
FIPS 205 (SLH-DSA/SPHINCS+) produces very large signatures (up to 49KB) and is slower. It is designed for firmware signing and certificate authorities, not blockchain transaction signing. FIPS 204 (ML-DSA) is the correct standard for wallet signatures.

Which crypto uses NIST FIPS 203 and FIPS 204?
BMIC — the only presale token implementing both primary NIST 2024 PQC standards from genesis. No major blockchain has deployed FIPS 203 or FIPS 204 at the wallet level. BMIC is the first mover. Presale $0.049999 at bmic.ai.

FIPS 203 + FIPS 204. Both Primary NIST Standards. Only BMIC Has Both.
ML-KEM-768 + ML-DSA-65. Security Level 3. Presale $0.049999.
Buy BMIC — The NIST-Compliant Quantum Wallet


The Quantum Clock Is Ticking — Act Now

Every day you wait, more of your public keys are being harvested. Intelligence agencies are running Harvest Now, Decrypt Later operations right now. Your wallet’s ECDSA keys are being collected and stored for the day quantum computers can crack them. That day is approaching faster than anyone expected.

BMIC’s presale is live — but it won’t last forever. With 50 phases and a 20% price increase from first to final tier, every phase that passes means a higher entry price. The public listing price will be set ABOVE the final presale tier. Early participants get the best deal. Period.

Don’t be the person who understood the quantum threat but didn’t act. The presale has already raised over $500,000 from investors who understand what’s coming. The window for ground-floor positioning is closing.

🔐 Buy BMIC Now — Join the Presale at bmic.ai

📱 Download the BMIC Quantum App

📄 Read the BMIC Whitepaper

🏠 Visit BMIC.ai — The Quantum-Secure Future

📰 Explore the BMIC Quantum Security Blog

🔬 Try the BMIC Quantum Demo — See Post-Quantum Security in Action

Explore BMIC Technology — ZPKE, Hybrid PQC, AI Security Deep Dive