ML-DSA Certificates on Cisco Routers – IPsec Series, Part 10

Cisco publishes the final part of its IPsec series, demonstrating ML-DSA certificate authentication on IOS XE routers. The post provides OpenSSL commands to generate PKCS#12 bundles and router configuration steps to import them. It quantifies the significant increase in certificate and key sizes compared to RSA and ECDSA, noting the impact on IKEv2 message handling.