Paper 2024/1893
Bitsliced Jasmin Implementation of the Mayo Signature Scheme
Abstract
We present a bitsliced Jasmin implementation of Mayo2, a multivariate quadratic (MQ)-based signature scheme. Mayo overcomes the disadvantage of the Unbalanced Oil and vinegar (UOV) scheme by modifying the UOV map to produce public keys of sizes comparable to ML-DSA. The NIST Additional Round 2 C reference implementation employs a nibble-sliced representation of GF(16), packing two field elements per byte across four 64-bit limbs. In contrast, our Jasmin implementation adopts a bitsliced representation as in the Round 1 submission, decomposing each GF(16) element across four separate 64-bit bit planes, enabling 64 simultaneous field operations. Our Jasmin implementation of Mayo2 takes 10.55 ms for key generation, 8.21 ms for signing and 0.17 ms for verification, based on an average of 1000 runs on a 13th Gen Intel Core i7-13700 processor (maximum turbo frequency 5.2 GHz) with 16 GB RAM. This implementation provides a multivariate quadratic-based signature scheme that is amenable to formal verification of constant-time execution, functional correctness and equivalence properties using EasyCrypt. Furthermore, the techniques developed in this work can be extended to other MQ-based signature schemes, including UOV.
Note: This revision discusses the Jasmin implementation based on NIST additional round 2 specification
Metadata
- Available format(s)
-
PDF
- Category
- Implementation
- Publication info
- Preprint.
- Keywords
- PQCJasminMayoEasyCryptFormal Verification
- Contact author(s)
-
samyukthaprof @ gmail com
pallavi @ cse iitm ac in
chester @ cse iitm ac in - History
- 2026-07-17: last of 2 revisions
- 2024-11-21: received
- See all versions
- Short URL
- https://ia.cr/2024/1893
- License
-
CC0
BibTeX
@misc{cryptoeprint:2024/1893,
author = {Samyuktha M and Pallavi Borkar and Chester Rebeiro},
title = {Bitsliced Jasmin Implementation of the Mayo Signature Scheme},
howpublished = {Cryptology {ePrint} Archive, Paper 2024/1893},
year = {2024},
url = {https://eprint.iacr.org/2024/1893}
}
