Is anyone aware of a small USB hardware device that sign ML-DSA *today*? I need composite ML-DSA (as in Ed25519 and ML-DSA-65). My use case is not *that* sensitive at to need a high security HSM for this, but I also don't want to pass private keys around. But I want portability.

I could ***hack*** one solution together by dumping an ML-DSA key as an opaque blob onto a YubiHMS and pull in on demand, but that half beats the purpose and is expensive as hell for the fake security :))

My other best solution is a tiny cloud "echo" service where I send a message signed with Ed25519 and it countersigns with ML-DSA using Cloud KMS or something similar, just seems just a huge cannon to pull in an entire cloud for such a stupid simple use case.