Sign44-8 494.5µ ± 74%
Verify44-8 109.2µ ± 1%
Keygen44-8 132.9µ ± 1%
± 74%... ah, right, ML-DSA signing does rejections (i.e. it tries again if the signature is not good, a random number of times).
We'll need the equivalent of https://words.filippo.io/rsa-keygen-bench/: deterministic benchmark targets that reject a statistically average number of times.
