FN-DSA (Falcon)

Compact signature scheme over NTRU lattices using fast Fourier sampling, slated to become FIPS 206.

Core Principles & Analysis

• Produces the smallest signatures of any NIST pick — around 666 bytes at security level 1.
• Its Gaussian sampling requires constant-time floating-point math, making safe implementations notoriously hard.
• The compactness matters most in certificate chains, where several signatures ride every TLS handshake.

Specifications & Metrics

• FAMILY: Lattice (NTRU)
• STATUS: Draft standard
• STANDARD: FIPS 206 (draft)
• SIGNATURE SIZE: ~0.7 KB
• YEAR: TBD