Paper 2021/1432

Wavelet: Code-based postquantum signatures with fast verification on microcontrollers

Gustavo Banegas, Thomas Debris-Alazard, Milena Nedeljković, and Benjamin Smith


This work presents the first full implementation of Wave, a postquantum code-based signature scheme. We define Wavelet, a concrete Wave scheme at the 128-bit classical security level (or NIST postquantum security Level 1) equipped with a fast verification algorithm targeting embedded devices. Wavelet offers 930-byte signatures, with a public key of 3161 kB. We include implementation details using AVX instructions, and on ARM Cortex-M4, including a solution to deal with Wavelet’s large public keys, which do not fit in the SRAM of a typical embedded device. Our verification algorithm is ≈ 4.65× faster then the original, and verifies in 1 087 538 cycles using AVX instructions, or 13 172 ticks in an ARM Cortex-M4.

Available format(s)
Publication info
Preprint. MINOR revision.
Post-quantum CryptographyCode-based SignatureFast VerificationImplementationEmbedded devices
Contact author(s)
gustavo @ cryptme in
thomas debris @ inria fr
milena nedeljkovic @ polytechnique edu
smith @ lix polytechnique fr
2021-10-26: received
Short URL
Creative Commons Attribution


      author = {Gustavo Banegas and Thomas Debris-Alazard and Milena Nedeljković and Benjamin Smith},
      title = {Wavelet: Code-based postquantum signatures with fast verification on microcontrollers},
      howpublished = {Cryptology ePrint Archive, Paper 2021/1432},
      year = {2021},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.