Grand Cayman, Cayman Islands, August sixth, 2026, Chainwire
Sui is including two NIST-approved post-quantum signature schemes, so accounts can transfer to quantum-safe keys derived from the restoration phrase customers already maintain.
Sui, the place cash strikes as freely as messages, introduced as we speak that it’s adopting two post-quantum signature schemes in its transfer towards quantum readiness.
The quantum timeline is totally different for blockchains, as a result of a public key onchain is totally different from a public key wherever else. In most programs, an attacker wants a breach earlier than they will begin engaged on a key. Onchain, the secret is already printed, uncovered completely the second an account transacts.
Shor’s algorithm breaks the elliptic-curve cryptography behind most onchain accounts as we speak, the identical math securing banking programs and a lot of the web. Harvest-now-forge-later assortment doesn’t require quantum {hardware}; it requires a visual key and endurance. The publicity is already accruing. In March 2026, Google Quantum AI estimated that precisely this assault, recovering a non-public key from an uncovered public key, would run in minutes on a fault-tolerant machine of underneath half one million bodily qubits.
That’s why Sui is adopting two signature schemes matched to totally different sorts of danger, slightly than betting on one algorithm.
ML-DSA-65 (FIPS 204) for native accounts. For on a regular basis transactions, ML-DSA-65 turns into a local protocol signature scheme. Sui is integrating Degree 3 slightly than the cheaper Degree 1, following a July 2026 incident the place an AI mannequin halved the efficient key energy of HAWK, a post-quantum signature candidate, in about 60 hours, after two years of skilled human evaluate had cleared it. The remainder of the web stack is converging on the identical selection too: AWS KMS now provides ML-DSA signing in its hardware-backed key service, and Android 17’s Keystore generates quantum-safe signatures contained in the system’s safe {hardware} beginning at ML-DSA-65, skipping the 44 parameter set fully.
SLH-DSA-SHA2-128s (FIPS 205) for good contract vaults. For top-value property, hash-based signatures are dealt with inside Transfer contracts slightly than the protocol core. Hash-based safety is the better-understood of the 2 households, and preserving it in-contract means Sui can keep appropriate with whichever post-quantum requirements the broader business settles on, with out a core protocol improve. Given Sui’s bridges to different networks, that adaptability issues.
The 2 relaxation on totally different arithmetic, so a weak point present in one doesn’t undermine the opposite. Each comply with NIST’s standardized post-quantum algorithms and the joint CISA/NSA/NIST quantum-readiness roadmap.
Customers Hold Their Restoration Phrase and Their Tackle
Sui was constructed for cryptographic agility, which implies signature schemes might be added with out disturbing the basics of the community. That property is the distinction between a migration and a rebuild, and it’s why the work described here’s a routine protocol-feature replace slightly than a change to consensus or present state.
The toughest a part of any cryptographic migration just isn’t the brand new algorithm. The issue is that everyone seems to be already utilizing the outdated one.
On Sui, an ML-DSA-65 personal key’s a 32-byte seed, the identical dimension wallets retailer as we speak, derived from the identical restoration phrase via a brand new customary derivation path. Wallets again up and restore precisely as they do now.
Present accounts have a path that doesn’t contain shifting funds. Tackle aliases, already deployed on Sui, let an account replace its authorization key to a post-quantum key whereas preserving its deal with and its property in place. No pressured migration, no costly switch of every thing an account holds.
The sincere value is dimension. A post-quantum signature and public key are considerably bigger than an Ed25519 pair, which will increase transaction dimension. That’s the worth the entire business is paying for quantum resistance. Verification is the half that would have damage and doesn’t: ML-DSA-65 verification on Sui is shut sufficient to Ed25519 that per-signature community value doesn’t rise. Sui’s transaction dimension restrict and assist for programmable transaction blocks soak up the remainder, and additional optimization work is underway.
Put up Quantum Rollout Timeline
The core implementation is constructed and benchmarked. Quantum-safe vaults are focused for Mainnet this 12 months, with native ML-DSA-65 accounts reaching Testnet by finish of 12 months and native account authentication on Mainnet focused for Q1 2027. Pockets, SDK, and CLI assist will arrive alongside. Impartial audits are underway, and timelines keep open whereas that evaluate and Testnet suggestions proceed. This displays present route, not a completed, absolutely audited launch.
Put up-quantum accounts arrive as an additive, opt-in functionality, via the identical rollout path zkLogin and passkeys used. Nothing present modifications, and no utility must do something as we speak.
For background on how every Sui primitive transitions to post-quantum cryptography, customers can see Securing Sui within the Quantum Computing Period.Â
About Sui
Sui, the place cash strikes as freely as messages, is a next-generation Layer 1 blockchain constructed for scalable finance and international funds. Based by the core workforce behind Meta’s stablecoin initiative and powered by an object-centric mannequin, Sui makes property, permissions, and person knowledge programmable and ownable. Sui’s primitives supply builders every thing they should create high-performance funds and monetary functions, together with on the spot agentic funds. Customers can study extra at sui.io.
Contact: [email protected]
Contact
Sui Basis[email protected]
