History

Timeline of scheme data updates and security events tracked on this site.

1. 2026-06-04 Attack

   Improved MQ attack (Asanuma, Chen, Furue, Sakata & Takagi, ePrint 2026/1054) reduces MAYO1 classical security estimate from 2^156 to 2^145. Still above NIST Level I threshold (128 bits); flagged as warning.

   MAYO

2. 2026-05-26 Update

   Updated FAEST performance data to use the AVX2+AES-NI optimized implementation (faest-arch-opt) instead of the reference implementation. Signing is 10–100× faster depending on the parameter set.

   FAEST

3. 2026-05-26 Update

   Updated SNOVA to v2.3 (2026-04-03). Split round-2 and round-3 data: round-3 now shows the 14 current parameter sets from the v2.3 spec (l=4 variants retained with warnings, new q=19 variants, rectangular 4×5 structure added per "Rectangular signatures" update).

   SNOVA

4. 2026-05-14 Milestone

   NIST announced 9 Round 3 candidates for additional post-quantum signature schemes: FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV. Rationale in NIST IR 8610. Round 3 candidates.

   FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV

5. 2026-05-09 Attack

   Updated UOV security flags based on pℓ-truncated polynomial ring intersection attack (Furue & Ikematsu, ePrint 2026/298). Improves on Ran's wedge attack for Ip (~128 bits), III (~182 bits), V (~223 bits). Is parameter sets newly flagged as warning (~159 bits, still above threshold).

   UOV

6. 2026-05-09 Attack

   Updated UOV and MAYO security flags based on wedge attack (Ran, ePrint 2025/1143). MAYO-2 ("two") marked broken (~113 bits, below 128-bit threshold). UOV Ip, III, and V parameter sets marked with warning (reduced but still above threshold). UOV Is unaffected.

   UOV, MAYO

7. 2026-05-09 Attack

   Updated SNOVA security flags based on wedge product attack (Bros et al., ePrint 2026/237). 6 parameter sets marked broken: (37 17 2), (25 8 3), (56 25 2), (24 5 5), (75 33 2), (29 6 5). 2 parameter sets marked with warning: (24 5 4), (37 8 4).

   SNOVA

8. 2026-05-08 Update

   Updated 7 schemes to their latest published specifications. PERK redesigned parameter sets (v2.2.0). MQOM adds gf16 variants (v2.1). RYDE and Mirath corrected signature sizes and added faster variants. CROSS, SQIsign, and MAYO updated with revised benchmarks.

   CROSS, MAYO, MQOM, Mirath, PERK, RYDE, SQIsign

9. 2026-05-07 Update

   Fixed some typos in scheme data. commit

10. 2026-05-07 Update

    Website rewritten with SvelteKit, Tailwind CSS v4, and a new round selector, filter panel, and scatter plot.