Paper 2026/659

Reformulating the SNOVA Signature Scheme

Hao Guo, Tsinghua University

Yen-Liang Kuan, National Dong Hwa University, Taiwan

Jan Adriaan Leegwater, Vacuas, Leiden, The Netherlands

Peigen Li, Beijing Institute of Mathematical Sciences and Applications, China

Po-En Tseng, National Dong Hwa University, Taiwan, Hon Hai Research Institute

Lih-Chung Wang, National Dong Hwa University, Taiwan, Hon Hai Research Institute

Abstract

In this note, we review the formulation of SNOVA in three different languages: the ring-equation form, the whipping form, and the tensor form. Based on this, we propose a reformulation of SNOVA and discuss the security analysis of the resulting reformulated scheme. As a conclusion, we find that this new framework allows for greater flexibility in parameter selection and enables us to obtain parameter sets that remain competitive. In particular, as shown in the appendix, parameter sets over odd characteristic $\mathbb{F}_{q}$ lead to smaller key sizes and may offer improved resistance against certain attacks. This makes parameter sets over odd characteristic $\mathbb{F}_{q}$ especially interesting from a practical perspective. We propose a number of parameter sets that have certificate sizes below one kilobyte.

@misc{cryptoeprint:2026/659,
      author = {Jintai Ding and Hao Guo and Yen-Liang Kuan and Jan Adriaan Leegwater and Peigen Li and Po-En Tseng and Lih-Chung Wang},
      title = {Reformulating the {SNOVA} Signature Scheme},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/659},
      year = {2026},
      url = {https://eprint.iacr.org/2026/659}
}