.png){kind=icon}
.png){kind=icon}
Return
A Simple Noncommutative UOV Scheme
.png){kind=icon}
PRE
AI
DOI：10.11650/tjm/251110.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
In this paper, we propose a new multivariate signature scheme SNOVA (Simple Noncommutative unbalanced Oil and Vinegar scheme with randomness Alignment), which is a UOV-variant scheme over noncommutative rings. SNOVA is a Round 2 candidate in the NIST ongoing PQC standardization competition for additional signature schemes. This paper presents the design rationale of SNOVA and, using the Round 2 version as an example, conducts its security analysis and parameter selection. UOV, initially introduced in 1997, has undergone extensive research and is widely recognized as a robust signature scheme with excellent efficiency. Nonetheless, UOV is hindered by its substantial public key sizes. Specifically, when targeting NIST security level I, UOV public keys typically span from 40KB to 60KB in size. In comparison to UOV, SNOVA achieves a remarkable reduction in the public key size, making it to a mere 1KB, while maintaining commendable performance levels. This is also on the same level as the current NIST standards. Due to the efficiency and compactness, we believe that SNOVA offers an attractive option for general applications.
Keywords:
PQC
MQ
digital signature
UOV
SNOVA
Journal
T
IF:
0.6
Papers:
37
Citations:
0