PT-2026-27359

The ML-DSA verification algorithm as specified in FIPS 204, subsection 6.3 requires verifiers to check that the infinity norm of the deserialized signer response $z$ does not exceed $gamma 1 - beta$ line 13 of Algorithm 8. The same check is required to be performed during signature generation...