Supply chain· 12 Oct 2026· 3 min read

AWS publishes ML-DSA software-supply-chain signing guidance

AWS published implementation guidance for quantum-resistant software-supply-chain signing using ML-DSA.

This is engineering guidance, not a new KMS launch: ML-DSA-44/65/87 signing keys were announced generally available on June 13, 2025. Check regional availability. Signing services, artifact formats, trust distribution, verifiers and deployment policies must all support the intended workflow.

What it means for your migration

Evaluate the entire signing and verification path rather than assuming a signing primitive upgrades every consuming tool.

Guidance does not establish universal verifier support or automatic migration of AWS workloads.

Chronology

Timeline of events

Every step in this story with its date, authority and evidence class.

13 Jun 2025C
KMS ML-DSA signing generally available
ML-DSA-44/65/87 signing keys launched; check regional availability.
AWS ↗
12 Oct 2026C
AWS publishes ML-DSA software-supply-chain signing guidance
AWS published implementation guidance for quantum-resistant software-supply-chain signing using ML-DSA.
AWS Security Blog ↗