Skip to content

Add QR-UOV signature schemes #2582

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
baentsch merged 8 commits into from
Oct 21, 2026
Merged

Add QR-UOV signature schemes #2582

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
a36b89b
Add QR-UOV signature schemes
0rlych1kk4 Sep 20, 2026
c5a8290
test(kats): record the 30 missing QR-UOV all digests
paschal533 Sep 22, 2026
ae11833
test(cmake): fail when an implementation ships that no option can enable
paschal533 Sep 22, 2026
2eabf03
ci: build QR-UOV on ref, opt and avx2, and assert which one was selected
paschal533 Sep 22, 2026
9ecd361
fix(ci): address review; the avx2 job was grading ref
paschal533 Sep 22, 2026
07606c5
test(constant-time): record the QR-UOV secret-dependent operations
paschal533 Sep 29, 2026
347c321
docs: mark QR-UOV upstream maintenance TBD
0rlych1kk4 Oct 17, 2026
f7fb257
fix(qruov): address portability review comments
0rlych1kk4 Oct 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
213 changes: 213 additions & 0 deletions .CMake/alg_support.cmake
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -214,6 +214,38 @@ cmake_dependent_option(OQS_ENABLE_SIG_cross_rsdpg_256_balanced "" ON "OQS_ENABLE
cmake_dependent_option(OQS_ENABLE_SIG_cross_rsdpg_256_fast "" ON "OQS_ENABLE_SIG_CROSS" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_cross_rsdpg_256_small "" ON "OQS_ENABLE_SIG_CROSS" OFF)

option(OQS_ENABLE_SIG_QRUOV "Enable qruov algorithm family" ON)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q7L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q7L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L3aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L3shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L3aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L3shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q7L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q7L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L3aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L3shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L3aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L3shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q7L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q7L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L3aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L3shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L3aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L3shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L10aes "" ON "OQS_ENABLE_SIG_QRUOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L10shake "" ON "OQS_ENABLE_SIG_QRUOV" OFF)

option(OQS_ENABLE_SIG_UOV "Enable uov algorithm family" ON)
cmake_dependent_option(OQS_ENABLE_SIG_uov_ov_Is "" ON "OQS_ENABLE_SIG_UOV" OFF)
cmake_dependent_option(OQS_ENABLE_SIG_uov_ov_Ip "" ON "OQS_ENABLE_SIG_UOV" OFF)
Expand Down Expand Up @@ -887,6 +919,187 @@ if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS))
endif()


if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q7L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q7L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q7L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q7L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L3aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q31L3aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L3shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q31L3shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q31L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q31L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q31L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L3aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q127L3aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L3shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q127L3shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q127L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_1q127L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_1q127L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q7L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q7L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q7L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q7L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L3aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q31L3aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L3shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q31L3shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q31L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q31L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q31L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L3aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q127L3aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L3shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q127L3shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q127L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_3q127L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_3q127L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q7L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q7L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q7L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q7L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L3aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q31L3aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L3shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q31L3shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q31L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q31L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q31L10shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L3aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q127L3aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L3shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q127L3shake" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L10aes_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q127L10aes" OFF)
endif()
endif()

if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_X86_64_BUILD OR (OQS_USE_AVX2_INSTRUCTIONS AND OQS_USE_BMI2_INSTRUCTIONS AND OQS_USE_AES_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_qruov_5q127L10shake_avx2 "" ON "OQS_ENABLE_SIG_qruov_5q127L10shake" OFF)
endif()
endif()


if(CMAKE_SYSTEM_NAME MATCHES "Linux|Darwin")
if(OQS_DIST_ARM64_V8_BUILD OR (OQS_USE_ARM_NEON_INSTRUCTIONS AND OQS_USE_ARM_NEON_INSTRUCTIONS))
cmake_dependent_option(OQS_ENABLE_SIG_uov_ov_Is_neon "" ON "OQS_ENABLE_SIG_uov_ov_Is" OFF)
Expand Down
2 changes: 2 additions & 0 deletions .github/workflows/basic.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,8 @@ jobs:
steps:
- name: Checkout code
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # pin@v4
- name: Ensure the build system can reach everything that ships
run: python3 -m pytest --verbose tests/test_cmake_option_coverage.py tests/test_kats_json.py
- name: Ensure code conventions are upheld
run: python3 -m pytest --verbose tests/test_code_conventions.py
- name: Check that doxygen can parse the documentation
Expand Down
Loading
Loading