History

Timeline of scheme data updates and security events tracked on this site.

  1. Milestone

    Picked ML-DSA-65 as Sui's PQ authenticator: FIPS 204, NIST level 3, 24.3 µs verify (0.9× Ed25519) at 5,261 B on-chain. Chosen over FN-DSA-512's smaller footprint because ML-DSA has no floating-point signing hazard and the strongest assurance story of the FIPS-track options (machine-checked proofs via mldsa-native). fastcrypto components are being built for it. The pick is highlighted everywhere it appears — the Sui lens table, the zoo scatter, and the new sign-time chart.

    ML-DSA

  2. Update

    Added a sign time vs. pk+sig size chart above the zoo scatter: browser-side signing cost (from scripts/ts-bench.ts) against total on-chain footprint, log–log, for the 10 schemes we measured ourselves — the same wallet-cost/chain-cost pair the Sui lens table puts side by side. Bottom-left is best. Unlike the zoo scatter below it, this one isn't driven by the sidebar filters — browser sign times only exist for the measured candidates, not for every YAML parameter set.

  3. Update

    Widened the zoo (scatter + table below the Sui lens) to show every parameter set at every NIST level — previously each scheme was collapsed to its floor level and anything above level 2 was dropped, so ML-DSA showed only ML-DSA-44 and SLH-DSA only its 128-bit sets. Now ~113 rows: ML-DSA-44/65/87, SLH-DSA across 128/192/256, Falcon-512 and -1024, and the on-ramp candidates at all their levels. The Sui lens hero is unchanged — it stays the curated decision table. Level checkboxes are now data-driven, so no empty "Level 4" control appears (no curated scheme targets NIST category 4).

  4. Update

    Expanded the Sui lens's SLH-DSA rows from 2 to all 4 level-1 hash-variant/speed combinations — added SLH-DSA-SHA2-128s and SLH-DSA-SHA2-128f alongside the existing SHAKE-128s/128f, in both the Rust verify data and the new TypeScript keygen/sign benchmark (scripts/ts-bench.ts, via @noble/post-quantum's slh_dsa_sha2_128s/128f). SHA2-128s signs faster than SHAKE-128s in pure JS (~2.2s/op vs ~7.5s/op) but still slow enough to get its own reduced iteration count (50, vs SHAKE-128s's 30).

    SLH-DSA

  5. Update

    Added Keygen/Sign columns to the Sui lens, measured separately in TypeScript through the libraries a Sui wallet would actually use (@mysten/sui for Ed25519, @noble/post-quantum for the PQ schemes) — a new scripts/ts-bench.ts in this repo, median of 1000 iterations (100, or 30 for SLH-DSA-SHAKE-128s's ~7.5s/op sign). Removed the Mac-M2-Max/Sui-validator-server host toggle entirely; the lens now reports Mac M2 Max only.

  6. Update

    Sui lens updated with a new pq-sig-bench run against fastcrypto's mahdi/fn-dsa-512 branch (pre-merge). ML-DSA narrowed from a five-implementation average to aws-lc-rs alone (which delegates to mldsa-native, carrying CBMC + HOL Light proofs) but expanded to all three benched levels, 44/65/87. Added FN-DSA-1024 as a PQClean-reference row (no fastcrypto implementation yet). FN-DSA-512's row now includes keygen/sign, measured through fastcrypto's public sign API (PQClean under the hood, re-verified before returning).

    Falcon, ML-DSA

  7. Update

    Sui lens re-based on a new pq-sig-bench run measured through fastcrypto on the Apple M2 Max: FN-DSA-512 verify 13.2 µs (0.47× Ed25519), ML-DSA-44 shown as the mean of five implementations (libcrux, RustCrypto ml-dsa, fips204, PQClean C, aws-lc-rs). Added a qualitative Details column (implementation risk, Rust ecosystem assurance, assumption maturity). SLH-DSA recategorized from Symmetric to Hash-based (FAEST remains Symmetric).

    Falcon, ML-DSA, SLH-DSA

  8. Update

    Published a standalone KEMs comparison page — public-key and ciphertext sizes plus keygen/encaps/decaps benchmarks for ML-KEM, HQC, and classical ECDH.

  9. Attack

    Improved MQ attack (Asanuma, Chen, Furue, Sakata & Takagi, ePrint 2026/1054) reduces MAYO1 classical security estimate from 2^156 to 2^145. Still above NIST Level I threshold (128 bits); flagged as warning.

    MAYO

  10. Update

    Updated FAEST performance data to use the AVX2+AES-NI optimized implementation (faest-arch-opt) instead of the reference implementation. Signing is 10–100× faster depending on the parameter set.

    FAEST

  11. Update

    Updated SNOVA to v2.3 (2026-04-03). Split round-2 and round-3 data: round-3 now shows the 14 current parameter sets from the v2.3 spec (l=4 variants retained with warnings, new q=19 variants, rectangular 4×5 structure added per "Rectangular signatures" update).

    SNOVA

  12. Milestone

    NIST announced 9 Round 3 candidates for additional post-quantum signature schemes: FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV. Rationale in NIST IR 8610. Round 3 candidates.

    FAEST, HAWK, MAYO, MQOM, QR-UOV, SDitH, SNOVA, SQIsign, UOV

  13. Attack

    Updated UOV security flags based on pℓ-truncated polynomial ring intersection attack (Furue & Ikematsu, ePrint 2026/298). Improves on Ran's wedge attack for Ip (~128 bits), III (~182 bits), V (~223 bits). Is parameter sets newly flagged as warning (~159 bits, still above threshold).

    UOV

  14. Attack

    Updated UOV and MAYO security flags based on wedge attack (Ran, ePrint 2025/1143). MAYO-2 ("two") marked broken (~113 bits, below 128-bit threshold). UOV Ip, III, and V parameter sets marked with warning (reduced but still above threshold). UOV Is unaffected.

    UOV, MAYO

  15. Attack

    Updated SNOVA security flags based on wedge product attack (Bros et al., ePrint 2026/237). 6 parameter sets marked broken: (37 17 2), (25 8 3), (56 25 2), (24 5 5), (75 33 2), (29 6 5). 2 parameter sets marked with warning: (24 5 4), (37 8 4).

    SNOVA

  16. Update

    Updated 7 schemes to their latest published specifications. PERK redesigned parameter sets (v2.2.0). MQOM adds gf16 variants (v2.1). RYDE and Mirath corrected signature sizes and added faster variants. CROSS, SQIsign, and MAYO updated with revised benchmarks.

    CROSS, MAYO, MQOM, Mirath, PERK, RYDE, SQIsign

  17. Update

    Fixed some typos in scheme data. commit

  18. Update

    Website rewritten with SvelteKit, Tailwind CSS v4, and a new round selector, filter panel, and scatter plot.