core properties
- Very compact keys and signatures.
- No longer slow!
- A complex signing procedure.
- The coolest team!
-- sizes --
| parameter set | public keys | signatures |
|---|---|---|
| NIST ‑ Ⅰ | 83 bytes | 200 bytes |
| NIST ‑ Ⅲ | 129 bytes | 306 bytes |
| NIST ‑ Ⅴ | 169 bytes | 406 bytes |
-- performance --
x86_64 (Intel Raptor Lake)
Cycle counts for an optimized implementation (using platform-specific assembly):
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 32.2 megacycles | 93.9 megacycles | 12.1 megacycles |
| NIST ‑ Ⅲ | 102.1 megacycles | 320.3 megacycles | 31.5 megacycles |
| NIST ‑ Ⅴ | 214.5 megacycles | 674.7 megacycles | 77.6 megacycles |
Cycle counts for a pure C implementation:
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 43.9 megacycles | 125.2 megacycles | 18.1 megacycles |
| NIST ‑ Ⅲ | 150.5 megacycles | 447.3 megacycles | 54.7 megacycles |
| NIST ‑ Ⅴ | 277.1 megacycles | 835.6 megacycles | 106.3 megacycles |
AArch64 (Apple M4 Pro)
Cycle counts for an optimized implementation (using platform-specific assembly):
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 20.4 megacycles | 60.0 megacycles | 7.2 megacycles |
| NIST ‑ Ⅲ | 67.0 megacycles | 217.0 megacycles | 18.2 megacycles |
| NIST ‑ Ⅴ | 130.3 megacycles | 425.8 megacycles | 41.9 megacycles |
Cycle counts for a pure C implementation:
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 28.6 megacycles | 79.4 megacycles | 11.0 megacycles |
| NIST ‑ Ⅲ | 96.1 megacycles | 294.4 megacycles | 31.7 megacycles |
| NIST ‑ Ⅴ | 166.4 megacycles | 513.4 megacycles | 59.7 megacycles |
AArch64 (ARM Cortex-A76)
Cycle counts for an optimized implementation (using platform-specific assembly):
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 114.4 megacycles | 326.8 megacycles | 50.1 megacycles |
| NIST ‑ Ⅲ | 345.7 megacycles | 1041.9 megacycles | 136.3 megacycles |
| NIST ‑ Ⅴ | 811.5 megacycles | 2431.4 megacycles | 337.5 megacycles |
Cycle counts for a pure C implementation:
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 118.9 megacycles | 343.9 megacycles | 52.9 megacycles |
| NIST ‑ Ⅲ | 431.4 megacycles | 1281.6 megacycles | 183.8 megacycles |
| NIST ‑ Ⅴ | 833.2 megacycles | 2449.1 megacycles | 349.9 megacycles |
ARMv7 (ARM Cortex‑M4)
Cycle counts for an optimized implementation (using platform-specific assembly):
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 379.6 megacycles | 1233.3 megacycles | 148.8 megacycles |
| NIST ‑ Ⅲ | 1005.6 megacycles | 3992.5 megacycles | 395.4 megacycles |
| NIST ‑ Ⅴ | 2422.3 megacycles | 10023.4 megacycles | 881.8 megacycles |
Cycle counts for a pure C implementation:
| parameter set | keygen | signing | verifying |
|---|---|---|---|
| NIST ‑ Ⅰ | 564.4 megacycles | 1854.1 megacycles | 229.5 megacycles |
| NIST ‑ Ⅲ | 1886.6 megacycles | 5929.8 megacycles | 668.5 megacycles |
| NIST ‑ Ⅴ | 4200.4 megacycles | 13726.2 megacycles | 1689.5 megacycles |
Code size and stack usage (optimized implementation):
| parameter set | stack usage | code size | ||
|---|---|---|---|---|
| keygen | signing | verifying | ||
| NIST ‑ Ⅰ | 56 kB | 99 kB | 37 kB | 173 kB |
| NIST ‑ Ⅲ | 75 kB | 132 kB | 56 kB | 185 kB |
| NIST ‑ Ⅴ | 110 kB | 179 kB | 73 kB | 194 kB |
Code size and stack usage (pure C implementation):
| parameter set | stack usage | code size | ||
|---|---|---|---|---|
| keygen | signing | verifying | ||
| NIST ‑ Ⅰ | 57 kB | 99 kB | 40 kB | 170 kB |
| NIST ‑ Ⅲ | 76 kB | 133 kB | 63 kB | 180 kB |
| NIST ‑ Ⅴ | 112 kB | 181 kB | 83 kB | 191 kB |
resources
-- NIST submission --
specification
- specification (version 3.0 from 2026‑09‑01)
- specification (version 2.0.1 from 2025‑07‑07)
- specification (version 2.0 from 2025‑02‑05)
- specification (version 1.0 from 2023‑06‑01)
implementation
- implementation (version under continuous development)
- implementation (version 3.0 from 2026‑09‑01)
- implementation (version 2.0 from 2025‑02‑05)
- implementation (version 1.0 from 2023‑06‑01)
-- papers --
HD-based
-
SQIsign2D‑West: The Fast, the Small, and the Safer
Andrea Basso, Pierrick Dartois, Luca De Feo, Antonin Leroux, Luciano Maino, Giacomo Pope, Damien Robert, and Benjamin Wesolowski (2024)
-
SQIsign2D‑East: A New Signature Scheme Using 2-dimensional Isogenies
Kohei Nakagawa and Hiroshi Onuki (2024)
-
SQIPrime: A dimension 2 variant of SQISignHD with non-smooth challenge isogenies
Max Duparc and Tako Boris Fouotsa (2024)
-
SQIsignHD: New Dimensions in Cryptography
Pierrick Dartois, Antonin Leroux, Damien Robert, and Benjamin Wesolowski (2023)
KLPT-based
-
New algorithms for the Deuring correspondence: Towards practical and secure SQISign signatures
Luca De Feo, Antonin Leroux, Patrick Longa, and Benjamin Wesolowski (2022)
-
SQISign: compact post-quantum signatures from quaternions and isogenies
Luca De Feo, David Kohel, Antonin Leroux, Christophe Petit, and Benjamin Wesolowski (2020)
-- third-party implementations --
-
SQIsign / PRISM v2 in Sage
KU Leuven – COSIC. A pedagogical, almost spec-compliant implementation of SQIsign v2 in SageMath.
-- talks --
-
SQIsign
6th PQC Standardization Conference, 2025-09-26, Gaithersburg, MD, USA
citations
In order to cite SQIsign (round‑3 version),
you may use the following BibTeX entry:
@techreport{NISTPQC-ADD-R3:SQIsign26,
author = {Aardal, Marius A. and Adj, Gora and Aranha, Diego F. and Basso, Andrea and Borin, Giacomo and Canales Mart{\'\i}nez, Isaac Andr{\'e}s and Ch{\'a}vez-Saab, Jorge and Corte-Real Santos, Maria and Dartois, Pierrick and De Feo, Luca and Duparc, Max and Espitau, Thomas and Eriksen, Jonathan Komada and Fouotsa, Tako Boris and Gazzoni Filho, D{\'e}cio Luiz and Hess, Basil and Invernizzi, Riccardo and Kohel, David and Leroux, Antonin and Longa, Patrick and Maino, Luciano and Meyer, Michael and Mula, Marzio and Nakagawa, Kohei and Onuki, Hiroshi and Panny, Lorenz and Patranabis, Sikhar and Petit, Christophe and Pope, Giacomo and Reijnders, Krijn and Robert, Damien and Rodr{\'\i}guez-Henr{\'\i}quez, Francisco and Schaeffler, Sina and Vercauteren, Frederik and Wallet, Alexandre and Wesolowski, Benjamin and van Woerden, Wessel},
title = {{SQIsign}},
institution = {{N}ational {I}nstitute of {S}tandards and {T}echnology},
year = 2026,
url = {https://sqisign.org},
}
contributors
-- authors --
(Alphabetical order.)
- Marius A. Aardal Aarhus University, Denmark
- Gora Adj Technology Innovation Institute, UAE
- Diego F. Aranha Aarhus University, Denmark
- Andrea Basso IBM Research Europe, Switzerland
- Giacomo Borin IBM Research Europe and University of Zurich, Switzerland
- Isaac Andrés Canales Martínez Technology Innovation Institute, UAE
- Jorge Chávez-Saab Technology Innovation Institute, UAE
- Maria Corte-Real Santos CNRS and ENS de Lyon, France, previously University College London, UK
- Pierrick Dartois DGA-MI, Bruz, France, previously Bordeaux University Inria Center, France
- Luca De Feo IBM Research Europe, Switzerland
- Max Duparc EPFL, Switzerland
- Thomas Espitau PQShield SAS, France
- Jonathan Komada Eriksen KU Leuven, Belgium, previously NTNU, Norway
- Tako Boris Fouotsa The University of Manchester, UK, previously EPFL, Switzerland
- Décio Luiz Gazzoni Filho Technology Innovation Institute, UAE and State University of Londrina, Brazil
- Basil Hess IBM Research Europe, Switzerland
- Riccardo Invernizzi KU Leuven, Belgium
- David Kohel Institut de Mathématiques de Marseille, Aix-Marseille University, France
- Antonin Leroux DGA-MI, Bruz, France and Université de Rennes, France
- Patrick Longa Microsoft Research, USA
- Luciano Maino University of Birmingham, UK, previously University of Bristol, UK
- Michael Meyer University of Regensburg, Germany
- Marzio Mula University of the Bundeswehr Munich, Germany
- Kohei Nakagawa NTT Social Informatics Laboratories, Japan
- Hiroshi Onuki University of Tokyo, Japan
- Lorenz Panny Technische Universität München, Germany, previously Academia Sinica, Taiwan
- Sikhar Patranabis IBM Research India
- Christophe Petit Université libre de Bruxelles, Belgium and University of Birmingham, UK
- Giacomo Pope NCC Group, UK and University of Bristol, UK
- Krijn Reijnders Radboud University Nijmegen, Netherlands
- Damien Robert Bordeaux University Inria Center, France
- Francisco Rodríguez-Henríquez Technology Innovation Institute, UAE
- Sina Schaeffler IBM Research Europe and ETH Zürich, Switzerland
- Frederik Vercauteren KU Leuven, Belgium
- Alexandre Wallet PQShield Ltd., UK
- Benjamin Wesolowski CNRS and ENS de Lyon, France
- Wessel van Woerden PQShield B.V., Netherlands
-- funding --
- UK EPSRC grant EP/S022503/1
- European Research Council, grant No. 101116169 (AGATHA CRYPTY)
- German Research Foundation (DFG) – SFB 1119 – 236615297
- German Federal Ministry of Education and Research (BMBF), project 6G-RIC (ID 16KISK033)
- Academia Sinica Investigator Award AS‑IA‑109‑M01
- France 2030 program, grant agreement No. ANR-22-PETQ-0008 PQ-TLS
- Agence Nationale de la Recherche, grant ANR MELODIA (ANR-20-CE40-0013)
- Agence Nationale de la Recherche, grant ANR CIAO (ANR-19-CE48-0008)
- European Research Council (ERC) under the EU's Horizon 2020 research and innovation programme, ISOCRYPT (101020788)
- Danish Independent Research Council, grant No. 1026-00350B (RENAIS)
- Swiss National Science Foundation (SNSF) Consolidator Grant no. 213766 (CryptonIs)