Sui is advancing plans to integrate post-quantum cryptographic tools, aiming to shield user accounts from potential future threats posed by quantum computers. The Layer 1 blockchain will incorporate two signature methods standardized by the National Institute of Standards and Technology (NIST).
These additions allow optional upgrades to quantum-resistant keys while preserving existing recovery phrases and addresses.
Quantum computers capable of running Shor’s algorithm could eventually compromise the elliptic-curve cryptography that underpins most blockchain accounts today.
On public ledgers, public keys become permanently visible once an account initiates a transaction, creating opportunities for “harvest-now, decrypt-later” collection of data.
Recent estimates suggest a sufficiently advanced quantum system might recover private keys from exposed public ones relatively quickly.
Regulatory timelines are also tightening, with moves to phase out classical algorithms in sensitive systems in the coming years.
Sui’s architecture emphasizes cryptographic flexibility, enabling new signature schemes to be introduced as standard protocol features rather than requiring major overhauls to consensus or network state.
This approach supports a smoother transition compared to chains that would need broader migrations.
The network will deploy two complementary schemes tailored to different use cases.
For routine accounts and everyday transactions, ML-DSA-65 (aligned with NIST’s FIPS 204) will function as a native protocol-level option at security Level 3.
This parameter set was selected over lighter alternatives to provide additional margin, informed by recent demonstrations of advances in analyzing related candidates.
Similar Level 3 choices appear in other systems securing substantial web traffic and hardware key services.
For high-value assets held in vaults, the hash-based SLH-DSA-SHA2-128s (FIPS 205) will operate inside Move smart contracts.
This placement keeps the more mature hash-based approach flexible and avoids locking the core protocol to one standard, allowing compatibility with evolving industry practices—particularly useful given Sui’s cross-chain connections.
Relying on distinct mathematical foundations (lattice-based versus hash-based) means a vulnerability in one does not automatically affect the other.Migration remains user-friendly.
Private keys under the new schemes derive from the same 32-byte seed size used today, generated via a standardized new path from existing recovery phrases.
Wallets will continue to handle backups and restores in familiar ways. Address aliases, already live on the network, enable accounts to switch authorization keys to the quantum-safe versions without relocating assets or altering addresses.
No compulsory moves or bulk transfers are required.Larger signature and public-key sizes relative to current Ed25519 implementations will expand transaction footprints—an industry-wide trade-off for enhanced resistance.
Verification performance for ML-DSA-65 is expected to remain comparable enough that per-signature costs do not increase meaningfully, with Sui’s existing limits and programmable transaction support accommodating the change.
Further optimizations are in progress.Implementation of the core components is complete and has undergone benchmarking.
Quantum-safe vaults are aimed at mainnet rollout later in 2026.
Native ML-DSA-65 accounts are scheduled for testnet by year-end, with full mainnet authentication targeted for the first quarter of 2027.
Supporting updates for wallets, SDKs, and command-line tools will accompany these releases.
Independent audits continue, and schedules may adjust based on review outcomes and testnet results.
The features will roll out as optional, additive capabilities—similar to prior introductions such as zkLogin and passkeys—leaving existing accounts, contracts, and applications unaffected. This positions Sui to adapt as quantum capabilities mature without disrupting current operations.