FN-DSA
Falcon, a lattice-based signature scheme selected by NIST for standardisation as FN-DSA in FIPS 206, which had not been published in final form at the time of writing. Its signatures are much smaller than ML-DSA's, in parameter sets Falcon-512 and Falcon-1024.
- Quantum status
- Believed quantum-resistant
- Standard
- FIPS 206, draft
- Family
- lattice
- Also known as
- Falcon, FIPS 206
Rated chains using it
- Algorand Mainnet, opt-in
Account signatures, Falcon-1024. Native account type since 22 August 2026. Existing accounts can rekey to it. Source code or release
- Algorand Mainnet, mandatory
Ledger attestation. State Proofs, signed with Falcon since 2022. Statement or write-up
- Hedera Proposed
Account signatures. New key type targeted for 2027, with ML-DSA as the fallback if FIPS 206 is delayed. Statement or write-up
- IOTA Mainnet, opt-in
Identity layer. IOTA Identity v1.7 credentials, not layer-1 transactions. Specification or proposal
- Neo Proposed
Account signatures. Falcon is named as a research candidate in the issue's task list. One contributor recommended Falcon-512, and a member raised Falcon's floating-point arithmetic as a problem for a decentralised network. Statement or write-up
- Nexus Mainnet, opt-in
Account signatures, Falcon-512. Accepted by consensus for signature-chain transactions and selectable with scheme=falcon. No holder transaction in our mainnet sample used it. Source code or release
- Polkadot Proposed
Account signatures. Statement or write-up
- Solana Specified, not deployed
Account signatures. Implementations exist in Anza and Firedancer; not deployed. Statement or write-up
- Tidecoin Mainnet, mandatory
Account signatures, Falcon-512 (round 3, PQClean). Every input in the sampled transaction carries an 898-byte key (897-byte Falcon-512 key plus prefix) and a 655 to 663-byte signature. The v0.18.3 verifier calls Falcon-512 alone. Read on-chain
- Tidecoin Specified, not deployed
Account signatures, Falcon-1024. In the 1.0 release candidates, gated on the AuxPoW activation, which is disabled in the mainnet parameters. Source code or release
- Tron Testnet
Account signatures, Falcon-512. Activated on the Nile testnet; absent from mainnet. Read on-chain
- XDC Network Specified, not deployed
Validator consensus. Proof of concept on an unmerged branch, last committed 9 August 2025. Source code or release
Sources
- Falcon: Fast-Fourier Lattice-based Compact Signatures over NTRU , Falcon team. Accessed 19 October 2026.
- Post-Quantum Cryptography project , NIST. Accessed 19 October 2026.
Published beside the Hardy Score and not an input to it. How each chain is scored is set out in the methodology.