Grand Cayman, Cayman Islands, August sixth, 2026, Chainwire
Sui is including two NIST-approved post-quantum signature schemes, so accounts can transfer to quantum-safe keys derived from the restoration phrase customers already maintain.
Sui, the place cash strikes as freely as messages, introduced in the present day that it’s adopting two post-quantum signature schemes in its transfer towards quantum readiness.
The quantum timeline is totally different for blockchains, as a result of a public key onchain is totally different from a public key anyplace else. In most techniques, an attacker wants a breach earlier than they will begin engaged on a key. Onchain, the bottom line is already revealed, uncovered completely the second an account transacts.
Shor’s algorithm breaks the elliptic-curve cryptography behind most onchain accounts in the present day, the identical math securing banking techniques and many of the web. Harvest-now-forge-later assortment doesn’t require quantum {hardware}; it requires a visual key and persistence. The publicity is already accruing. In March 2026, Google Quantum AI estimated that precisely this assault, recovering a non-public key from an uncovered public key, would run in minutes on a fault-tolerant machine of underneath half one million bodily qubits.
That’s why Sui is adopting two signature schemes matched to totally different sorts of threat, moderately than betting on one algorithm.
ML-DSA-65 (FIPS 204) for native accounts. For on a regular basis transactions, ML-DSA-65 turns into a local protocol signature scheme. Sui is integrating Stage 3 moderately than the cheaper Stage 1, following a July 2026 incident the place an AI mannequin halved the efficient key energy of HAWK, a post-quantum signature candidate, in about 60 hours, after two years of professional human evaluate had cleared it. The remainder of the web stack is converging on the identical selection too: AWS KMS now gives ML-DSA signing in its hardware-backed key service, and Android 17’s Keystore generates quantum-safe signatures contained in the gadget’s safe {hardware} beginning at ML-DSA-65, skipping the 44 parameter set fully.
SLH-DSA-SHA2-128s (FIPS 205) for sensible contract vaults. For prime-value property, hash-based signatures are dealt with inside Transfer contracts moderately than the protocol core. Hash-based safety is the better-understood of the 2 households, and maintaining it in-contract means Sui can keep suitable with whichever post-quantum requirements the broader trade settles on, with no core protocol improve. Given Sui’s bridges to different networks, that adaptability issues.
The 2 relaxation on totally different arithmetic, so a weak spot present in one doesn’t undermine the opposite. Each observe NIST’s standardized post-quantum algorithms and the joint CISA/NSA/NIST quantum-readiness roadmap.
Customers Maintain Their Restoration Phrase and Their Handle
Sui was constructed for cryptographic agility, which implies signature schemes will be added with out disturbing the basics of the community. That property is the distinction between a migration and a rebuild, and it’s why the work described here’s a routine protocol-feature replace moderately than a change to consensus or present state.
The toughest a part of any cryptographic migration just isn’t the brand new algorithm. The issue is that everyone seems to be already utilizing the previous one.
On Sui, an ML-DSA-65 personal secret is a 32-byte seed, the identical measurement wallets retailer in the present day, derived from the identical restoration phrase by a brand new normal derivation path. Wallets again up and restore precisely as they do now.
Current accounts have a path that doesn’t contain shifting funds. Handle aliases, already deployed on Sui, let an account replace its authorization key to a post-quantum key whereas maintaining its handle and its property in place. No pressured migration, no costly switch of all the things an account holds.
The trustworthy value is measurement. A post-quantum signature and public key are considerably bigger than an Ed25519 pair, which will increase transaction measurement. That’s the value the entire trade is paying for quantum resistance. Verification is the half that might have harm and doesn’t: ML-DSA-65 verification on Sui is shut sufficient to Ed25519 that per-signature community value doesn’t rise. Sui’s transaction measurement restrict and help for programmable transaction blocks take up the remaining, and additional optimization work is underway.
Put up Quantum Rollout Timeline
The core implementation is constructed and benchmarked. Quantum-safe vaults are focused for Mainnet this yr, with native ML-DSA-65 accounts reaching Testnet by finish of yr and native account authentication on Mainnet focused for Q1 2027. Pockets, SDK, and CLI help will arrive alongside. Unbiased audits are underway, and timelines keep open whereas that evaluate and Testnet suggestions proceed. This displays present route, not a completed, absolutely audited launch.
Put up-quantum accounts arrive as an additive, opt-in functionality, by the identical rollout path zkLogin and passkeys used. Nothing present adjustments, and no software must do something in the present day.
For background on how every Sui primitive transitions to post-quantum cryptography, customers can see Securing Sui within the Quantum Computing Period.Â
About Sui
Sui, the place cash strikes as freely as messages, is a next-generation Layer 1 blockchain constructed for scalable finance and international funds. Based by the core staff behind Meta’s stablecoin initiative and powered by an object-centric mannequin, Sui makes property, permissions, and consumer information programmable and ownable. Sui’s primitives supply builders all the things they should create high-performance funds and monetary functions, together with immediate agentic funds. Customers can study extra at sui.io.
Contact: [email protected]
Contact
Sui Basis[email protected]
