Digital Signature
SNOVA
Simple Noncommutative-ring-based UOV Algorithm
non-FIPSmultivariate1 parameter setsQNSP tier: default+provider: liboqs
Multivariate signature scheme using a non-commutative ring structure to reduce public-key size relative to plain UOV. NIST PQC additional-signatures track candidate.
Mechanism
How it works
SNOVA modifies UOV's underlying field to a non-commutative matrix ring, dramatically reducing public-key size while preserving multivariate hardness.
Parameter Sets
1 variants shipped
Each variant trades security category against key, ciphertext, or signature size. QNSP exposes all variants via the @cuilabs/liboqs-native binding; tenant crypto-policy determines which are allowed.
| Variant | NIST Level | Public Key | Secret Key | Signature | Note |
|---|---|---|---|---|---|
| SNOVA (multiple param sets at NIST levels 1, 3, 5) | L5 | 2,456 B | 48 B | 168 B |
NIST ACVP
Conformance evidence
QNSP runs the official NIST ACVP test vectors against every shipped algorithm. Live evidence + SHA-3-256 tamper digest at /verify/conformance.
@noble/post-quantum
non-addressablePure-JavaScript reference; cross-verification secondary on Maximum + Government tiers.
@cuilabs/liboqs-native
non-addressableNative-C primary production engine. Runs across every QNSP backend service.
Use Cases
When to use it
- Multivariate signatures with much smaller public keys than plain UOV
- NIST PQC additional-signatures track candidate
Trade-offs
What you give up, what you get
- Compact public keys and signatures
- Non-commutative ring structure is newer — less cryptanalysis history than UOV
References