Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences

A Compact Digital Signature Scheme Based on the Module-LWR Problem

Hiroki Okada, Atsushi Takayasu, Kazuhide Fukushima, Shinsaku Kiyomoto, Tsuyoshi Takagi

Published Mar 18, 2021• 1 citation
Publisher

Abstract

We propose a new lattice-based digital signature scheme MLWRSign by modifying Dilithium, which is one of the second-round candidates of NIST's call for post-quantum cryptographic standards. To the best of our knowledge, our scheme MLWRSign is the first signature scheme whose security is based on the (module) learning with rounding (LWR) problem. Due to the simplicity of the LWR, the secret key size is reduced by approximately 30% in our scheme compared to Dilithium, while achieving the same level of security. Moreover, we implemented MLWRSign and observed that the running time of our scheme is comparable to that of Dilithium.

DOI
10.1587/transfun.2020dmp0012

Related papers

CRYSTALS – Dilithium: Digital Signatures from Module Lattices

Léo Ducas, Tancrède Lepoint, Vadim Lyubashevsky +3 more

This paper presents Dilithium, a lattice-based signature scheme that is part of the CRYSTALS (Cryptographic Suite for Algebraic Lattices) package that will be submitted to the NIST call for postquantum standards.The scheme is designed to be simple to securely implement against side-channel attacks and to have comparable efficiency to the currently best lattice-based signature schemes.Our implementation results show that Dilithium is competitive with lattice schemes of the same security level and outperforms digital signature schemes based on other post-quantum assumptions.

•Jan 1, 2018•125 citations

A Lattice-Based Threshold Signature Scheme for IoT Applications

Elizar Kustov

The advancement of quantum computing threatens classical cryptographic systems, such as RSA and ECDSA, which can be broken by quantum algorithms like Shor's algorithm. This necessitates the development of post-quantum cryptographic systems resistant to quantum attacks. Lattice-based cryptography, particularly the Learning with Errors (LWE) and Learning with Rounding (LWR) problems, is a promising approach. This paper presents a threshold signature scheme based on the Kryzhovnik signature, an adaptation of the Crystals-Dilithium scheme for LWR. The scheme leverages the hardness of the Module Learning with Rounding (MLWR) and Module Short Integer Solution (MSIS) problems to ensure post-quantum security. It allows a group of N participants to collaboratively generate a signature, requiring at least t participants to create a valid signature, preventing forgery by individual participants. The scheme uses Shamir's Secret Sharing, ensuring the shared secret is never stored explicitly. Key advantages include efficiency, security, and threshold-based access control, making it suitable for IoT and other resource-constrained environments.

Wave Electronics and its Application in Information and Telecommunication Systems (WECONF)•May 12, 2025•0 citations

A Blind Signature from Module Latices

Huy Quoc Le, Willy Susilo, Xuan Thanh Khuc +2 more

Since its birth by Chaum, blind signatures have become one of the fundamental components in the so-called e-cash or e-voting. The scheme ensures a message to be blinded before being signed. Among all lattice-based signatures submitted to NIST post-quantum cryptographic standardization, Dilithium is a very promising candidate. The scheme has some advantages such as simple to implement securely, conservative with parameters and minimal in total size of public key and signature. In this paper, we propose a blind signature scheme based on the framework of Dilithium in order to take advantages of Dilithium. The proposed scheme is blind and one-more unforgeable secure in the random oracle model under the hardness of the module Learning with Errors problem MLWE and the module short integer solution problem MSIS.

IEEE Conference on Dependable and Secure Computing (DSC)•Nov 1, 2019•11 citations

ModFalcon: Compact Signatures Based On Module-NTRU Lattices

Chitchanok Chuengsatiansup, Thomas Prest, Damien Stehlé +2 more

Lattices lead to promising practical post-quantum digital signatures, combining asymptotic efficiency with strong theoretical security guarantees. However, tuning their parameters into practical instantiations is a delicate task. On the one hand, NIST round~2 candidates based on Lyubashevsky's design (such as dilithium and qtesla) allow several tradeoffs between security and efficiency, but at the expense of a large bandwidth consumption. On the other hand, the hash-and-sign falcon signature is much more compact and is still very efficient, but it allows only two security levels, with large compactness and security gaps between them. We introduce a new family of signature schemes based on the falcon design, which relies on module lattices. Our concrete instantiation enjoys the compactness and efficiency of falcon, and allows an intermediate security level. It leads to the most compact lattice-based signature achieving a quantum security above 128 bits.

ACM Asia Conference on Computer and Communications Security (ASIA CCS)•Oct 5, 2020•47 citations

Structured Module Lattice-based Cryptography

Joppe W. Bos, Joost Renes, Fréderik Vercauteren +1 more

The ongoing transition to Post-Quantum Cryptography (PQC) has highlighted the need for cryptographic schemes that offer high security, strong performance, and fine-grained parameter selection. In lattice-based cryptography, particularly for the popular module variants of learning with errors (Module-LWE) and learning with rounding (Module-LWR) schemes based on power-of-two cyclotomics, existing constructions often force parameter choices that either overshoot or undershoot desired security levels due to structural constraints. In this work, we introduce a new class of techniques that are the advantages of both worlds: structured Module-LWE (or LWR) embeds more algebraic structure than a module such that it significantly improves performance, yet less structure than a power-of-two cyclotomic ring such that it still enables more flexible and efficient parameter selection. We present two concrete instances: a construction based on a radical extension of a two-power cyclotomic field denoted radical Ring-LWE (RR-LWE) or Ring-LWR (RR-LWR), and a cyclotomic block-ring module lattice approach (BRM-LWE or BRM-LWR). These new structured Module-LWE and LWR reduce the required number of uniformly random bytes in its matrix by a factor up to the module rank and allow efficient NTT implementations while enabling more granular security-performance trade-offs. We analyze the security of these constructions, provide practical parameter sets, and present implementation results demonstrating a performance improvement of up to 37% compared to an optimized implementation of ML-KEM. Our techniques apply to both key encapsulation mechanisms and digital signature schemes, offering a pathway to more adaptable and performant PQC standards.

IACR Transactions on Cryptographic Hardware and Embedded Systems•Jul 17, 2026•0 citations

Exploring Lattice-based Post-Quantum Signature for JWT Authentication: Review and Case Study

Abdolmaged Alkhulaifi, El-Sayed M. El-Alfy

Due to the scalability of the stateless and compact JSON Web Tokens (JWT), they are increasingly used in securing modern applications to support single-sign-on context and establish trust in microservices or connected-devices architectures. However, currently JWT relies on traditional encryption algorithms that are based on integer factorization or discrete logarithm problems; this exposes JWT signatures to vulnerability when quantum computers become available. Recently, NIST has announced new standards which are quantum safe. In this paper, we investigate the usage of two quantum-resistant algorithms, which are NIST candidates of round 2 standardization process in 2019, to create and verify JWT signatures. Namely, we consider lattice-based schemes (DILITHIUM and qTESLA) and compare their performance against RSA for digital signature for different security levels defined by NIST. The results show that lattice-based digital signature schemes have better performance than RSA in terms of request per seconds and average response time. DILITHIUM has demonstrated the best performance while also having smaller performance loss when scaling the security level.

IEEE Vehicular Technology Conference•May 1, 2020•20 citations
We propose a new lattice-based digital signature scheme MLWRSign by modifying Dilithium, which is one of the second-round candidates of NIST's call for post-quantum cryptographic standards. To the best of our knowledge, our scheme MLWRSign is the first signature scheme whose security is based on the (module) learning with rounding (LWR) problem. Due to the simplicity of the LWR, the secret key size is reduced by approximately 30% in our scheme compared to Dilithium, while achieving the same level of security. Moreover, we implemented MLWRSign and observed that the running time of our scheme is comparable to that of Dilithium.
This paper presents Dilithium, a lattice-based signature scheme that is part of the CRYSTALS (Cryptographic Suite for Algebraic Lattices) package that will be submitted to the NIST call for postquantum standards.The scheme is designed to be simple to securely implement against side-channel attacks and to have comparable efficiency to the currently best lattice-based signature schemes.Our implementation results show that Dilithium is competitive with lattice schemes of the same security level and outperforms digital signature schemes based on other post-quantum assumptions.
The advancement of quantum computing threatens classical cryptographic systems, such as RSA and ECDSA, which can be broken by quantum algorithms like Shor's algorithm. This necessitates the development of post-quantum cryptographic systems resistant to quantum attacks. Lattice-based cryptography, particularly the Learning with Errors (LWE) and Learning with Rounding (LWR) problems, is a promising approach. This paper presents a threshold signature scheme based on the Kryzhovnik signature, an adaptation of the Crystals-Dilithium scheme for LWR. The scheme leverages the hardness of the Module Learning with Rounding (MLWR) and Module Short Integer Solution (MSIS) problems to ensure post-quantum security. It allows a group of N participants to collaboratively generate a signature, requiring at least t participants to create a valid signature, preventing forgery by individual participants. The scheme uses Shamir's Secret Sharing, ensuring the shared secret is never stored explicitly. Key advantages include efficiency, security, and threshold-based access control, making it suitable for IoT and other resource-constrained environments.
Since its birth by Chaum, blind signatures have become one of the fundamental components in the so-called e-cash or e-voting. The scheme ensures a message to be blinded before being signed. Among all lattice-based signatures submitted to NIST post-quantum cryptographic standardization, Dilithium is a very promising candidate. The scheme has some advantages such as simple to implement securely, conservative with parameters and minimal in total size of public key and signature. In this paper, we propose a blind signature scheme based on the framework of Dilithium in order to take advantages of Dilithium. The proposed scheme is blind and one-more unforgeable secure in the random oracle model under the hardness of the module Learning with Errors problem MLWE and the module short integer solution problem MSIS.
Lattices lead to promising practical post-quantum digital signatures, combining asymptotic efficiency with strong theoretical security guarantees. However, tuning their parameters into practical instantiations is a delicate task. On the one hand, NIST round~2 candidates based on Lyubashevsky's design (such as dilithium and qtesla) allow several tradeoffs between security and efficiency, but at the expense of a large bandwidth consumption. On the other hand, the hash-and-sign falcon signature is much more compact and is still very efficient, but it allows only two security levels, with large compactness and security gaps between them. We introduce a new family of signature schemes based on the falcon design, which relies on module lattices. Our concrete instantiation enjoys the compactness and efficiency of falcon, and allows an intermediate security level. It leads to the most compact lattice-based signature achieving a quantum security above 128 bits.
The ongoing transition to Post-Quantum Cryptography (PQC) has highlighted the need for cryptographic schemes that offer high security, strong performance, and fine-grained parameter selection. In lattice-based cryptography, particularly for the popular module variants of learning with errors (Module-LWE) and learning with rounding (Module-LWR) schemes based on power-of-two cyclotomics, existing constructions often force parameter choices that either overshoot or undershoot desired security levels due to structural constraints. In this work, we introduce a new class of techniques that are the advantages of both worlds: structured Module-LWE (or LWR) embeds more algebraic structure than a module such that it significantly improves performance, yet less structure than a power-of-two cyclotomic ring such that it still enables more flexible and efficient parameter selection. We present two concrete instances: a construction based on a radical extension of a two-power cyclotomic field denoted radical Ring-LWE (RR-LWE) or Ring-LWR (RR-LWR), and a cyclotomic block-ring module lattice approach (BRM-LWE or BRM-LWR). These new structured Module-LWE and LWR reduce the required number of uniformly random bytes in its matrix by a factor up to the module rank and allow efficient NTT implementations while enabling more granular security-performance trade-offs. We analyze the security of these constructions, provide practical parameter sets, and present implementation results demonstrating a performance improvement of up to 37% compared to an optimized implementation of ML-KEM. Our techniques apply to both key encapsulation mechanisms and digital signature schemes, offering a pathway to more adaptable and performant PQC standards.
Due to the scalability of the stateless and compact JSON Web Tokens (JWT), they are increasingly used in securing modern applications to support single-sign-on context and establish trust in microservices or connected-devices architectures. However, currently JWT relies on traditional encryption algorithms that are based on integer factorization or discrete logarithm problems; this exposes JWT signatures to vulnerability when quantum computers become available. Recently, NIST has announced new standards which are quantum safe. In this paper, we investigate the usage of two quantum-resistant algorithms, which are NIST candidates of round 2 standardization process in 2019, to create and verify JWT signatures. Namely, we consider lattice-based schemes (DILITHIUM and qTESLA) and compare their performance against RSA for digital signature for different security levels defined by NIST. The results show that lattice-based digital signature schemes have better performance than RSA in terms of request per seconds and average response time. DILITHIUM has demonstrated the best performance while also having smaller performance loss when scaling the security level.