Skip to content
Prizrak-Core

REALITY ML-DSA-65 via the host mapper

If mldsa65Seed is set in the REALITY inbound of an Xray server, the server signs the REALITY certificate with the post-quantum ML-DSA-65 signature. Prizrak-Core verifies this signature ๐Ÿ‘ป when the proxyโ€™s reality-opts has the public key mldsa65-verify.

The key is the mldsa65Verify value that xray mldsa65 prints together with mldsa65Seed (base64url).

{
  "xrayJson": [],
  "mihomo": [
    { "op": "set", "to": "reality-opts.mldsa65-verify", "value": "<mldsa65Verify>" }
  ],
  "base64": []
}

The node gets the key in reality-opts:

proxies:
  - name: ๐Ÿ‡ฉ๐Ÿ‡ช Germany
    type: vless
    # ...
    reality-opts:
      public-key: <X25519 public key>
      short-id: <short id>
      mldsa65-verify: <mldsa65Verify>