Paper 2026/659
Reformulating the SNOVA Signature Scheme
Abstract
In this note, we review the formulation of SNOVA in three different languages: the ring-equation form, the whipping form, and the tensor form. Based on this, we propose a reformulation of SNOVA and discuss the security analysis of the resulting reformulated scheme. As a conclusion, we find that this new framework allows for greater flexibility in parameter selection and enables us to obtain parameter sets that remain competitive. In particular, as shown in the appendix, parameter sets over odd characteristic $\mathbb{F}_{q}$ lead to smaller key sizes and may offer improved resistance against certain attacks. This makes parameter sets over odd characteristic $\mathbb{F}_{q}$ especially interesting from a practical perspective. We propose a number of parameter sets that have certificate sizes below one kilobyte.
Metadata
- Available format(s)
-
PDF
- Category
- Public-key cryptography
- Publication info
- Preprint.
- Keywords
- SNOVA
- Contact author(s)
-
jintai ding @ gmail com
guoh22 @ mails tsinghua edu cn
ylkuan @ gms ndhu edu tw
info @ vacuas nl
lpg22 @ bimsa cn
briantseng0320 @ gmail com
lcwang @ gms ndhu edu tw - History
- 2026-04-06: approved
- 2026-04-04: received
- See all versions
- Short URL
- https://ia.cr/2026/659
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2026/659,
author = {Jintai Ding and Hao Guo and Yen-Liang Kuan and Jan Adriaan Leegwater and Peigen Li and Po-En Tseng and Lih-Chung Wang},
title = {Reformulating the {SNOVA} Signature Scheme},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/659},
year = {2026},
url = {https://eprint.iacr.org/2026/659}
}
