SNOVA generalises UOV to a noncommutative matrix ring, producing very compact public keys and signatures while retaining fast signing.
Key parameters
spec snapshot- Hard problem
- UOV over noncommutative matrix ring
- Public key size
- ≈ 9–60 KB
- Signature size
- ≈ 376 B (SNOVA-24-5-4)
- NIST security levels
- I, III, V
NIST citations
3 sourcesRound timeline
5 events · 2023 → 2027- Round 1
Submission accepted
Included in the 40-candidate cohort for the additional-signatures on-ramp.
- Round 2
Advanced to Round 2
NIST selected 14 candidates for continued analysis (IR 8528).
- Round 3
Advanced to Round 3
Down-selected to 9 candidates for the final evaluation round.
- Round 2
Parameter revision
Adjusted (v, o, l, q) tuple after MinRank analysis tightening.
- Round 3
7th NIST PQC Standardization Conference
Scheduled late spring / early summer 2027, Gaithersburg, MD.
Source: NIST CSRC · IR 8610 (Round 3 advancement, May 14, 2026) · IR 8528 (Round 2 advancement, Oct 24, 2024).