QR-UOV embeds the Unbalanced Oil-and-Vinegar trapdoor into a quotient ring, shrinking public keys versus classical UOV while preserving signing/verification speed.
Key parameters
spec snapshot- Hard problem
- UOV over GF(q)[x]/(f(x))
- Public key size
- ≈ 20–32 KB (much smaller than classical UOV)
- Signature size
- ≈ 331 B
- NIST security levels
- I, III, V
NIST citations
3 sourcesRound timeline
4 events · 2023 → 2027- Round 1
Submission accepted
Included in the 40-candidate cohort for the additional-signatures on-ramp.
- Round 2
Advanced to Round 2
NIST selected 14 candidates for continued analysis (IR 8528).
- Round 3
Advanced to Round 3
Down-selected to 9 candidates for the final evaluation round.
- Round 3
7th NIST PQC Standardization Conference
Scheduled late spring / early summer 2027, Gaithersburg, MD.
Source: NIST CSRC · IR 8610 (Round 3 advancement, May 14, 2026) · IR 8528 (Round 2 advancement, Oct 24, 2024).