Grand Cayman, Cayman Islands, August sixth, 2026, Chainwire
Sui is including two NIST-approved post-quantum signature schemes, so accounts can transfer to quantum-safe keys derived from the restoration phrase customers already maintain.
Sui, the place cash strikes as freely as messages, introduced at the moment that it’s adopting two post-quantum signature schemes in its transfer towards quantum readiness.
The quantum timeline is totally different for blockchains, as a result of a public key onchain is totally different from a public key anyplace else. In most techniques, an attacker wants a breach earlier than they’ll begin engaged on a key. Onchain, the secret’s already printed, uncovered completely the second an account transacts.
Shor’s algorithm breaks the elliptic-curve cryptography behind most onchain accounts at the moment, the identical math securing banking techniques and a lot of the web. Harvest-now-forge-later assortment doesn’t require quantum {hardware}; it requires a visual key and endurance. The publicity is already accruing. In March 2026, Google Quantum AI estimated that precisely this assault, recovering a non-public key from an uncovered public key, would run in minutes on a fault-tolerant machine of below half one million bodily qubits.
That’s why Sui is adopting two signature schemes matched to totally different sorts of threat, quite than betting on one algorithm.
ML-DSA-65 (FIPS 204) for native accounts. For on a regular basis transactions, ML-DSA-65 turns into a local protocol signature scheme. Sui is integrating Stage 3 quite than the cheaper Stage 1, following a July 2026 incident the place an AI mannequin halved the efficient key energy of HAWK, a post-quantum signature candidate, in about 60 hours, after two years of skilled human overview had cleared it. The remainder of the web stack is converging on the identical alternative too: AWS KMS now affords ML-DSA signing in its hardware-backed key service, and Android 17’s Keystore generates quantum-safe signatures contained in the machine’s safe {hardware} beginning at ML-DSA-65, skipping the 44 parameter set fully.
SLH-DSA-SHA2-128s (FIPS 205) for sensible contract vaults. For top-value belongings, hash-based signatures are dealt with inside Transfer contracts quite than the protocol core. Hash-based safety is the better-understood of the 2 households, and protecting it in-contract means Sui can keep suitable with whichever post-quantum requirements the broader trade settles on, and not using a core protocol improve. Given Sui’s bridges to different networks, that adaptability issues.
The 2 relaxation on totally different arithmetic, so a weak spot present in one doesn’t undermine the opposite. Each comply with NIST’s standardized post-quantum algorithms and the joint CISA/NSA/NIST quantum-readiness roadmap.
Customers Maintain Their Restoration Phrase and Their Tackle
Sui was constructed for cryptographic agility, which suggests signature schemes might be added with out disturbing the basics of the community. That property is the distinction between a migration and a rebuild, and it’s why the work described here’s a routine protocol-feature replace quite than a change to consensus or present state.
The toughest a part of any cryptographic migration is just not the brand new algorithm. The issue is that everyone seems to be already utilizing the previous one.
On Sui, an ML-DSA-65 personal secret is a 32-byte seed, the identical measurement wallets retailer at the moment, derived from the identical restoration phrase via a brand new customary derivation path. Wallets again up and restore precisely as they do now.
Current accounts have a path that doesn’t contain transferring funds. Tackle aliases, already deployed on Sui, let an account replace its authorization key to a post-quantum key whereas protecting its deal with and its belongings in place. No compelled migration, no costly switch of every little thing an account holds.
The sincere value is measurement. A post-quantum signature and public key are considerably bigger than an Ed25519 pair, which will increase transaction measurement. That’s the value the entire trade is paying for quantum resistance. Verification is the half that might have damage and doesn’t: ML-DSA-65 verification on Sui is shut sufficient to Ed25519 that per-signature community value doesn’t rise. Sui’s transaction measurement restrict and assist for programmable transaction blocks soak up the remaining, and additional optimization work is underway.
Submit Quantum Rollout Timeline
The core implementation is constructed and benchmarked. Quantum-safe vaults are focused for Mainnet this 12 months, with native ML-DSA-65 accounts reaching Testnet by finish of 12 months and native account authentication on Mainnet focused for Q1 2027. Pockets, SDK, and CLI assist will arrive alongside. Impartial audits are underway, and timelines keep open whereas that overview and Testnet suggestions proceed. This displays present course, not a completed, totally audited launch.
Submit-quantum accounts arrive as an additive, opt-in functionality, via the identical rollout path zkLogin and passkeys used. Nothing present modifications, and no utility must do something at the moment.
For background on how every Sui primitive transitions to post-quantum cryptography, customers can see Securing Sui within the Quantum Computing Period.Â
About Sui
Sui, the place cash strikes as freely as messages, is a next-generation Layer 1 blockchain constructed for scalable finance and international funds. Based by the core workforce behind Meta’s stablecoin initiative and powered by an object-centric mannequin, Sui makes belongings, permissions, and person information programmable and ownable. Sui’s primitives supply builders every little thing they should create high-performance funds and monetary purposes, together with instantaneous agentic funds. Customers can be taught extra at sui.io.
Contact: [email protected]
Contact
Sui Basis[email protected]
