The classical Unbalanced Oil and Vinegar scheme — the most-studied multivariate signature, dating to 1999. Large public keys are offset by tiny signatures and very fast signing/verification.
Key parameters
spec snapshot- Hard problem
- UOV / MQ
- Public key size
- ≈ 43 KB (uov-Ip)
- Signature size
- ≈ 128 B (uov-Ip) — among smallest
- Sign / Verify
- Sub-ms; well-suited to verifier-heavy use cases
- NIST security levels
- I, III, V
NIST citations
3 sourcesRound timeline
4 events · 2023 → 2027- Round 1
Submission accepted
Included in the 40-candidate cohort for the additional-signatures on-ramp.
- Round 2
Advanced to Round 2
NIST selected 14 candidates for continued analysis (IR 8528).
- Round 3
Advanced to Round 3
Down-selected to 9 candidates for the final evaluation round.
- Round 3
7th NIST PQC Standardization Conference
Scheduled late spring / early summer 2027, Gaithersburg, MD.
Source: NIST CSRC · IR 8610 (Round 3 advancement, May 14, 2026) · IR 8528 (Round 2 advancement, Oct 24, 2024).