Sui has added two NIST-approved post-quantum signature schemes to its blockchain roadmap because it prepares non-compulsory quantum-safe accounts and vaults for future community upgrades.
Abstract
- Sui plans so as to add two NIST accepted put up quantum signature schemes for accounts and sensible contract vaults.
- Current restoration phrases and pockets addresses may be retained when customers transfer to quantum safe authentication.
- Quantum safe vaults are focused for mainnet this yr, with native accounts deliberate for testnet by the tip of 2026.
- ML DSA 65 and SLH DSA are designed to guard several types of belongings utilizing separate cryptographic approaches.
- The announcement follows related put up quantum safety work throughout Bitcoin custody, BNB Chain and different blockchain tasks.
In keeping with Sui’s newest announcement, the blockchain plans to introduce ML-DSA-65 as a native signature scheme for common accounts and SLH-DSA-SHA2-128s for high-value sensible contract vaults, giving customers an non-compulsory option to defend accounts towards future quantum computing dangers with out changing their restoration phrases or shifting belongings.
The rollout comes as blockchain builders and infrastructure suppliers more and more put together for the likelihood that future quantum computer systems may break right this moment’s public-key cryptography.
Not like conventional methods the place public keys typically stay hidden till wanted, Sui stated blockchain accounts expose public keys onchain as soon as transactions happen, permitting attackers to gather them years earlier than sensible quantum computer systems exist.
The community warned that such “harvest-now-forge-later” assaults don’t require quantum {hardware} right this moment as a result of attackers can merely archive uncovered public keys and wait till sufficiently succesful machines turn out to be out there.
Citing analysis from Google Quantum AI revealed in March 2026, Sui stated recovering a non-public key from an uncovered public key may finally take minutes on a fault-tolerant quantum laptop utilizing fewer than 500,000 bodily qubits.
Sui additionally pointed to altering authorities timelines round quantum safety. The announcement famous that whereas the U.S. Nationwide Institute of Requirements and Know-how beforehand focused 2030 to section out classical cryptographic algorithms and 2035 to ban them, Govt Order 14412, signed in June 2026, requires U.S. federal businesses to deploy post-quantum key institution by the tip of 2030 and post-quantum digital signatures by the tip of 2031 for delicate methods.
Sui has chosen two algorithms for completely different safety wants
As a substitute of counting on one post-quantum algorithm, Sui stated it chosen two standardized signature schemes constructed on completely different mathematical foundations so {that a} weak spot found in a single wouldn’t have an effect on the opposite.
For on a regular basis consumer accounts, the blockchain will combine ML-DSA-65, the Degree 3 parameter set outlined underneath NIST’s FIPS 204 normal, instantly into the protocol.
The community stated it deliberately chosen the higher-security Degree 3 possibility as an alternative of Degree 1 following a July 2026 incident by which researchers used an AI mannequin to cut back the efficient safety of the HAWK post-quantum signature candidate after consultants had beforehand reviewed it. In keeping with Sui, the incident didn’t have an effect on ML-DSA, however it bolstered the worth of selecting stronger safety margins slightly than lower-cost parameters.
The announcement added that ML-DSA-65 has already gained help elsewhere. Chrome and Cloudflare use the identical safety degree for post-quantum encryption defending greater than half of human-initiated net site visitors, whereas AWS Key Administration Service now helps ML-DSA signing and Android 17’s Keystore generates quantum-safe signatures utilizing ML-DSA-65 inside safe {hardware}.
In the meantime, high-value belongings will depend on SLH-DSA-SHA2-128s, the hash-based signature scheme standardized underneath FIPS 205. Reasonably than embedding it into the protocol itself, Sui will implement it by Transfer sensible contracts, permitting vaults to stay appropriate with future post-quantum requirements with out requiring adjustments to the community’s core protocol.
In keeping with the announcement, utilizing separate lattice-based and hash-based cryptographic households reduces the prospect {that a} single cryptographic breakthrough would have an effect on each protected asset.
Current restoration phrases will proceed to work
As a substitute of requiring customers to generate utterly new wallets, Sui stated its deterministic key structure permits quantum-safe personal keys to be derived from the identical restoration phrases customers already retailer right this moment.
Pockets backup and restoration due to this fact proceed to work by current seed phrases, whereas new derivation paths generate ML-DSA-65 keys.
Current accounts may even keep away from transferring belongings to new addresses. Deal with aliases, which have already been deployed on Sui, let customers change their authorization keys with post-quantum keys whereas retaining the identical pockets deal with and asset balances.
In keeping with the community, bigger signatures stay the principle trade-off. Publish-quantum signatures and public keys occupy considerably extra space than Ed25519 keys, growing transaction sizes throughout the community.
Verification prices, nonetheless, stay a lot nearer to current Ed25519 signatures than the bigger key sizes may recommend. Sui stated transaction dimension limits and programmable transaction blocks can accommodate the extra information whereas additional optimization work continues.
Rollout begins with vaults earlier than native accounts
The blockchain stated its core implementation has already been accomplished and benchmarked, though unbiased safety audits are presently underway.
Quantum-safe vaults are scheduled for mainnet deployment later this yr. Native ML-DSA-65 accounts are anticipated to succeed in testnet earlier than the tip of 2026, whereas native account authentication on mainnet is focused for the primary quarter of 2027 alongside pockets, software program growth equipment and command-line interface help.
The rollout stays non-compulsory, following the identical deployment mannequin beforehand used for zkLogin and passkeys. Current accounts, purposes and sensible contracts proceed working with out modification, and builders don’t have to replace purposes instantly, in keeping with the announcement.
Help for ML-DSA-65 may even prolong to Sui’s multisignature authenticator, permitting accounts to require each a classical Ed25519 signature and a post-quantum ML-DSA-65 signature earlier than authorizing transactions.
Different blockchain tasks have additionally accelerated quantum-security work
Sui’s announcement follows a collection of post-quantum safety initiatives introduced throughout the digital asset trade throughout latest months.
In Might, BNB Chain reported successful testing of ML-DSA-44 transaction signatures and pqSTARK consensus aggregation for BSC. Whereas the blockchain concluded that post-quantum migration may work with current wallets and infrastructure, testing additionally confirmed signature sizes rising from 65 bytes to roughly 2,420 bytes, lowering transaction throughput by about 40% to 50% due to bigger blocks and elevated community site visitors.
Institutional custody suppliers have additionally began specializing in future quantum dangers slightly than fast assaults. BitGo introduced quantum-risk management tools in July that measure public-key publicity, group UTXOs to keep away from leaving uncovered balances behind, and assist establishments transfer belongings into recent addresses after public keys turn out to be seen onchain.
One other proposal got here from AmericanFortress, which published its Zero-Knowledge Proof of Seed Provenance design by the Worldwide Affiliation for Cryptologic Analysis’s ePrint archive.
The proposal would permit current Bitcoin, Ethereum, and Solana pockets addresses to show possession utilizing zero-knowledge proofs with out requiring customers to rotate keys or switch funds, though deployment would nonetheless depend upon blockchain protocol upgrades and adoption by pockets suppliers. The proposal additionally cited Google’s latest quantum analysis whereas noting that present quantum computer systems stay incapable of finishing up such assaults right this moment.
