MQOM

  • Algorithm type: Digital signature scheme.
  • Main cryptographic assumption: Computing the solution of a Multivariate Quadratic problem..
  • Principal submitters: Ryad Benadjila, Charles Bouillaguet, Thibauld Feneuil, Matthieu Rivain.
  • Authors’ website: https://mqom.org/
  • Specification version: NIST Round 2.
  • Primary Source:
    • Source: https://github.com/mqom/mqom-v2/commit/ec6b7fa86e232a25f8b2f151a4b4eebb8e81b5e7
    • Implementation license (SPDX-Identifier): MIT
  • Optimized Implementation sources:
    • memopt:
      • Source: https://github.com/mqom/mqom-v2/commit/ec6b7fa86e232a25f8b2f151a4b4eebb8e81b5e7
      • Implementation license (SPDX-Identifier): MIT
    • avx2:
      • Source: https://github.com/mqom/mqom-v2/commit/ec6b7fa86e232a25f8b2f151a4b4eebb8e81b5e7
      • Implementation license (SPDX-Identifier): MIT

Support

  • Upstream maintenance: Actively maintained (statement)
  • OQS support tier: Tier 3

Parameter set summary

Parameter set Parameter set alias Security model Claimed NIST Level Public key size (bytes) Secret key size (bytes) Signature size (bytes)
mqom2_cat1_gf16_fast_r5 NA EUF-CMA 1 60 88 3280
mqom2_cat1_gf16_fast_r3 NA EUF-CMA 1 60 88 3484
mqom2_cat1_gf16_short_r5 NA EUF-CMA 1 60 88 2916
mqom2_cat1_gf16_short_r3 NA EUF-CMA 1 60 88 3060
mqom2_cat3_gf16_fast_r5 NA EUF-CMA 3 90 132 7738
mqom2_cat3_gf16_fast_r3 NA EUF-CMA 3 90 132 8224
mqom2_cat3_gf16_short_r5 NA EUF-CMA 3 90 132 6496
mqom2_cat3_gf16_short_r3 NA EUF-CMA 3 90 132 6820
mqom2_cat5_gf16_fast_r5 NA EUF-CMA 5 122 180 13772
mqom2_cat5_gf16_fast_r3 NA EUF-CMA 5 122 180 14708
mqom2_cat5_gf16_short_r5 NA EUF-CMA 5 122 180 12014
mqom2_cat5_gf16_short_r3 NA EUF-CMA 5 122 180 12664

mqom2_cat1_gf16_fast_r5 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?‡
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

‡For an explanation of what this denotes, consult the Explanation of Terms section at the end of this file.

mqom2_cat1_gf16_fast_r3 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat1_gf16_short_r5 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat1_gf16_short_r3 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat3_gf16_fast_r5 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat3_gf16_fast_r3 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat3_gf16_short_r5 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat3_gf16_short_r3 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat5_gf16_fast_r5 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat5_gf16_fast_r3 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat5_gf16_short_r5 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

mqom2_cat5_gf16_short_r3 implementation characteristics

Implementation source Identifier in upstream Supported architecture(s) Supported operating system(s) CPU extension(s) used No branching-on-secrets claimed? No branching-on-secrets checked by valgrind? Large stack usage?
Primary Source default All All None True True True
Primary Source memopt All All None True True False
Primary Source avx2 x86_64 Linux,Darwin AVX2,AES True True True

Are implementations chosen based on runtime CPU feature detection? No.

Explanation of Terms

  • Large Stack Usage: Implementations identified as having such may cause failures when running in threads or in constrained environments.

Copyright © Open Quantum Safe a Series of LF Projects, LLC.
For website terms of use, trademark policy, and other project policies, please see https://lfprojects.org.
This site uses Just the Docs, a documentation theme for Jekyll. Background image by Rick Doble.