Update on the NIST standardization of additional signature schemes
summary
NIST opens an on‑ramp that receives 50 proposals with 40 complete submissions and advances 14 candidates to a second round (announced Oct 2024); about 10 submissions show significant cryptanalytic breaks and another ~10 show notable weaknesses. Selected entries span UOV (classic, QRUOV, MAYO, SNOVA), five MPC‑in‑the‑head variants, lattice Hawk, code‑based CROSS and LESS, symmetric‑flavored Feast (VOLY/AES) and isogeny SKISign. Tradeoffs are concrete: UOV gives sub‑kilobyte signatures but ~1 MB public keys, SKISign gives tiny keys but very slow ops, lattices remain best for general performance. Tweaks are due Feb 5 and a third round targets 2026.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:06NIST postquantum project
- 3:03First three PQC standards
- 5:32New signature schemes on-ramp
- 8:27Second round candidates
- 9:08Multivariate schemes
- 13:28MPC-in-the-head schemes
- 17:24Lattice schemes and Hawk
- 19:59Code-based schemes: Cross and Less
- 22:09Symmetric and isogeny schemes
- 24:17Performance comparison
- 27:23Future plans
- 29:22Q&A
related talks
01h 02mLattices and the NIST PQ-crypto Standardization Process
53mPanel: Migrating to Post-Quantum Schemes
13mNavigating the Quantum Readiness Journey: Open-Source Cryptography, PKI and Signing Tools
46mAchieving Quantum Readiness: A Comprehensive Approach
28mRecent Developments on Multi-Party Schnorr Signatures
55mSigma Protocols
27mImplementing Post Quantum algorithms in PKCS #11
19mAgile is the new black – Why Preparing for Postquantum Crypto also Matters to You!