hybrid signatures.
ECDSA + dilithium side by side for safe migration.
Hybrid mode signs with both ECDSA and dilithium. It's safe today — dilithium protects you from quantum — and compatible today — ECDSA keeps every legacy consumer working.
signsecdsa + ml-dsa
verifieseither · both
compatfull
retirewhen ready
the safe middle
Hybrid is the bridge. You get quantum safety immediately and keep backward compatibility until the last ECDSA verifier is gone. Then you drop ECDSA and stay pure lattice.