We present a post-quantum digital signature scheme derived from a parametric KeyEncapsulation Mechanism (KEM) based on module lattices. The construction uses a seedexpanded block-circulant/module matrix, a CDT discrete Gaussian sampler, and negacyclicNTT for polynomial arithmetic. The scheme follows the Fiat–Shamir transform of an identification protocol and reduces to the hardness of the module-SIS problem. Concrete parameterstargeting approximately 120-bit classical security are provided.
Daniele Rufo (Wed,) studied this question.