Bitsliced Jasmin Implementation of Mayo - Round 2 Specification

[Samyuktha M]

Dear All,

I have implemented the Mayo signature scheme in Jasmin based on the NIST Additional call for proposals Round 2 specification.

The Jasmin code is available at https://github.com/samyukthasets/Round-2-Mayo-Jasmin  and the details are available in the accompanying IACR ePrint https://eprint.iacr.org/2024/1893 

On a 13th Generation Intel Core i7-13700 processor with a maximum turbo frequency of 5.2 GHz and 16 GB RAM, the average execution time over 1000 runs of each primitive measured  KeyGen 10.55 ms / Sign 8.21 ms / Verify 0.17 ms (Jasmin bitsliced) vs. KeyGen 4.06/2.94 ms, Sign 3.07/2.80 ms, Verify 1.66/1.87 ms (nibble-sliced C reference, AES-NI off/on).

To this end, we have a multivariate quadratic based signature implementation that is amenable for formal verification using EasyCrypt.

Regards

Samyuktha M