Juliane Krämer: On the Physical Security of Multivariate Signature Schemes

Multivariate signature schemes are interesting for use cases where post-quantum security and short signatures are required. Currently, the most relevant multivariate signature schemes are UOV - which is already 25 years old -, and variants of the UOV scheme. In this talk, I will present recent insights on the physical security of UOV-based signature schemes, i.e., their security with respect to side channel and fault attacks.