Grand Cayman, Cayman Islands, August sixth, 2026, Chainwire
Sui is including two NIST-approved post-quantum signature schemes, so accounts can transfer to quantum-safe keys derived from the restoration phrase customers already maintain.
Sui, the place cash strikes as freely as messages, introduced immediately that it’s adopting two post-quantum signature schemes in its transfer towards quantum readiness.
The quantum timeline is totally different for blockchains, as a result of a public key onchain is totally different from a public key wherever else. In most techniques, an attacker wants a breach earlier than they will begin engaged on a key. Onchain, the hot button is already revealed, uncovered completely the second an account transacts.
Shor’s algorithm breaks the elliptic-curve cryptography behind most onchain accounts immediately, the identical math securing banking techniques and many of the web. Harvest-now-forge-later assortment doesn’t require quantum {hardware}; it requires a visual key and persistence. The publicity is already accruing. In March 2026, Google Quantum AI estimated that precisely this assault, recovering a non-public key from an uncovered public key, would run in minutes on a fault-tolerant machine of underneath half one million bodily qubits.
That’s why Sui is adopting two signature schemes matched to totally different sorts of danger, quite than betting on one algorithm.
ML-DSA-65 (FIPS 204) for native accounts. For on a regular basis transactions, ML-DSA-65 turns into a local protocol signature scheme. Sui is integrating Degree 3 quite than the cheaper Degree 1, following a July 2026 incident the place an AI mannequin halved the efficient key energy of HAWK, a post-quantum signature candidate, in about 60 hours, after two years of knowledgeable human overview had cleared it. The remainder of the web stack is converging on the identical alternative too: AWS KMS now affords ML-DSA signing in its hardware-backed key service, and Android 17’s Keystore generates quantum-safe signatures contained in the system’s safe {hardware} beginning at ML-DSA-65, skipping the 44 parameter set completely.
SLH-DSA-SHA2-128s (FIPS 205) for sensible contract vaults. For prime-value belongings, hash-based signatures are dealt with inside Transfer contracts quite than the protocol core. Hash-based safety is the better-understood of the 2 households, and maintaining it in-contract means Sui can keep suitable with whichever post-quantum requirements the broader trade settles on, with no core protocol improve. Given Sui’s bridges to different networks, that adaptability issues.
The 2 relaxation on totally different arithmetic, so a weak point present in one doesn’t undermine the opposite. Each observe NIST’s standardized post-quantum algorithms and the joint CISA/NSA/NIST quantum-readiness roadmap.
Customers Maintain Their Restoration Phrase and Their Handle
Sui was constructed for cryptographic agility, which suggests signature schemes might be added with out disturbing the basics of the community. That property is the distinction between a migration and a rebuild, and it’s why the work described here’s a routine protocol-feature replace quite than a change to consensus or present state.
The toughest a part of any cryptographic migration just isn’t the brand new algorithm. The issue is that everyone seems to be already utilizing the outdated one.
On Sui, an ML-DSA-65 personal key’s a 32-byte seed, the identical dimension wallets retailer immediately, derived from the identical restoration phrase by a brand new normal derivation path. Wallets again up and restore precisely as they do now.
Present accounts have a path that doesn’t contain shifting funds. Handle aliases, already deployed on Sui, let an account replace its authorization key to a post-quantum key whereas maintaining its deal with and its belongings in place. No compelled migration, no costly switch of the whole lot an account holds.
The trustworthy value is dimension. A post-quantum signature and public key are considerably bigger than an Ed25519 pair, which will increase transaction dimension. That’s the value the entire trade is paying for quantum resistance. Verification is the half that would have harm and doesn’t: ML-DSA-65 verification on Sui is shut sufficient to Ed25519 that per-signature community value doesn’t rise. Sui’s transaction dimension restrict and help for programmable transaction blocks take in the remainder, and additional optimization work is underway.
Submit Quantum Rollout Timeline
The core implementation is constructed and benchmarked. Quantum-safe vaults are focused for Mainnet this yr, with native ML-DSA-65 accounts reaching Testnet by finish of yr and native account authentication on Mainnet focused for Q1 2027. Pockets, SDK, and CLI help will arrive alongside. Impartial audits are underway, and timelines keep open whereas that overview and Testnet suggestions proceed. This displays present route, not a completed, totally audited launch.
Submit-quantum accounts arrive as an additive, opt-in functionality, by the identical rollout path zkLogin and passkeys used. Nothing present modifications, and no software must do something immediately.
For background on how every Sui primitive transitions to post-quantum cryptography, customers can see Securing Sui within the Quantum Computing Period.Â
About Sui
Sui, the place cash strikes as freely as messages, is a next-generation Layer 1 blockchain constructed for scalable finance and international funds. Based by the core staff behind Meta’s stablecoin initiative and powered by an object-centric mannequin, Sui makes belongings, permissions, and consumer knowledge programmable and ownable. Sui’s primitives provide builders the whole lot they should create high-performance funds and monetary functions, together with instantaneous agentic funds. Customers can be taught extra at sui.io.
Contact: [email protected]
Contact
Sui Basis[email protected]
