SourcesSourcesSources

Securing Solana Against a Powerful Quantum Adversary (opens in a new tab)

Anza (Max Resnick and Sam Kim) · 2026-04-27

Describes a migration in which an existing Ed25519 account proves, with a post-quantum zero-knowledge proof, that its owner knows the seed. The account is then bound to a new post-quantum key and keeps its address. It uses Falcon as an example and says this is not a commitment to any scheme.

Checked 2026-10-11

ed25519-pokos: Proof of Knowledge of Seed (prototype) (opens in a new tab)

Anza, GitHub pull request · 2026-04-08

An experimental prototype of the seed proof used by the migration plan, merged and marked experimental.

Checked 2026-10-11

Quantum Migration Paths for Solana (opens in a new tab)

Jump Crypto / Firedancer · 2026-04-27

Proposes a post-quantum scheme for new wallets, then disabling Ed25519 verification, then migrating existing wallets with a post-quantum signature and a zero-knowledge proof of the seed. Names Falcon-512 the current leading candidate.

Checked 2026-10-11

Solana’s Quantum Readiness (opens in a new tab)

Solana Foundation · 2026-04-27

Says quantum computing is still years away and that no change is required today or likely anytime soon. Says Anza and Firedancer, working independently, were both led to Falcon.

Checked 2026-10-11

Falcon implementation (Firedancer) (opens in a new tab)

Firedancer, GitHub pull request · 2026-07-08

A Falcon implementation by the Firedancer team. Closed with the note that Falcon implemented as an on-chain program is viable.

Checked 2026-10-11

Falcon implementation (Anza solana-sdk) (opens in a new tab)

Anza, GitHub pull request

A Falcon implementation by the Anza team, an open draft.

Checked 2026-10-11

SIMD-0461: Falcon signature verification (opens in a new tab)

Solana Improvement Documents, GitHub · 2026-06-17

A proposal for a Falcon verification precompile and syscall, closed without merging because Falcon already runs as an ordinary on-chain program for under 170,000 compute units. Post-quantum transaction signatures are not live at the protocol level.

Checked 2026-10-11

Larger transaction sizes (opens in a new tab)

Solana · 2026-09-15

4,096-byte transactions (SIMD-0296 and SIMD-0385) activated on mainnet at epoch 1035, which leaves room for post-quantum signatures in a transaction.

Checked 2026-10-11

Solana Winternitz Vault (opens in a new tab)

Blueshift, GitHub · 2025-01-03

An opt-in vault program secured by hash-based one-time Winternitz signatures. Unaudited.

Checked 2026-10-11

solana-falcon512 (opens in a new tab)

Blueshift, GitHub

A Falcon-512 verification library for on-chain programs, using roughly 173,000 to 183,000 compute units per verification. Unaudited.

Checked 2026-10-11

Meet Willow, our state-of-the-art quantum chip (opens in a new tab)

Google · 2024-12-09

Willow has 105 qubits and was the first chip shown to reduce errors below the error-correction threshold as it scaled.

Checked 2026-10-11

IBM quantum roadmap (opens in a new tab)

IBM · 2023-12-04

IBM Condor, a processor with 1,121 superconducting qubits.

Checked 2026-10-11

IBM delivers new quantum processors, software, and algorithm breakthroughs (opens in a new tab)

IBM Newsroom · 2025-11-12

IBM Nighthawk has 120 qubits; Loon is experimental; IBM targets fault-tolerant quantum computing by 2029.

Checked 2026-10-11

Quantinuum announces commercial launch of Helios (opens in a new tab)

Quantinuum · 2025-11-05

Helios has 98 qubits; the company claims 48 error-corrected logical qubits.

Checked 2026-10-11

Quantum Echoes: verifiable quantum advantage on Willow (opens in a new tab)

Google · 2025-10-22

A verifiable quantum advantage result on Willow, about 13,000 times faster than a classical supercomputer on one physics task. It is not related to breaking cryptography.

Checked 2026-10-11

Quantum resource estimates for computing elliptic curve discrete logarithms (opens in a new tab)

Roetteler, Naehrig, Svore and Lauter (arXiv) · 2017-06-21

At most 9n + 2⌈log₂ n⌉ + 10 logical qubits for an n-bit curve: about 2,330 for 256-bit curves.

Checked 2026-10-11

How to compute a 256-bit elliptic curve private key with only 50 million Toffoli gates (opens in a new tab)

Litinski (arXiv) · 2023-06-14

About 50 million Toffoli gates, with an architecture of 6,000 modules of about 1,152 physical qubits each.

Checked 2026-10-11

Resource estimates for breaking 256-bit elliptic curve cryptography (opens in a new tab)

Babbush, Gidney, Boneh et al. (arXiv) · 2026-03

Under 1,200 logical qubits with under 90 million Toffoli gates (or under 1,450 with under 70 million), and under 500,000 physical qubits.

Checked 2026-10-11

Safeguarding cryptocurrency by disclosing quantum vulnerabilities responsibly (opens in a new tab)

Google Research · 2026-03

Google’s summary of the 2026 elliptic curve resource estimate.

Checked 2026-10-11

How to factor 2048 bit RSA integers with less than a million noisy qubits (opens in a new tab)

Gidney (arXiv) · 2025-05-21

For comparison, RSA-2048 (not elliptic curves): under one million noisy qubits running for under a week.

Checked 2026-10-11

NIST releases first 3 finalized post-quantum encryption standards (opens in a new tab)

NIST · 2024-08-13

FIPS 203 (ML-KEM), FIPS 204 (ML-DSA) and FIPS 205 (SLH-DSA) were finalized on 13 August 2024.

Checked 2026-10-11

FIPS 205: Stateless Hash-Based Digital Signature Standard (SLH-DSA) (opens in a new tab)

NIST · 2024-08-13

The standard that defines SLH-DSA, including the SHA2-128s parameter set.

Checked 2026-10-11

New plan for FN-DSA (opens in a new tab)

NIST pqc-forum (Ray Perlner) · 2026-09-28

FN-DSA (FIPS 206, the standardised form of Falcon) has not been published, not even as a draft. The revised draft will require fixed-point arithmetic; no date is given.

Checked 2026-10-11

noble-post-quantum (opens in a new tab)

Paul Miller, GitHub

The README states: “The library has not been independently audited yet.” and “at version 0.6.1, in Apr 2026, it was audited by ourselves (self-audited)”. Its Falcon is Falcon Round 3, not FN-DSA.

Checked 2026-10-11

@noble/post-quantum on the npm registry (opens in a new tab)

npm · 2026-08-27

Version 0.7.1 is the latest release, published 27 August 2026.

Checked 2026-10-11

Jupiter Price API v3 (opens in a new tab)

Jupiter

USD prices by mint address. Keyless access is available at a low rate with no sign-up.

Checked 2026-10-11

Squads Protocol v4 (opens in a new tab)

Squads, GitHub

The Squads v4 multisig program, ID SQDS4ep65T869zMMBKyuUq6aD6EgTu8psMjkvj52pCf, on mainnet and devnet.

Checked 2026-10-11

Squads v4 Multisig account (multisig.rs) (opens in a new tab)

Squads, GitHub

The Multisig account layout our decoder follows: create key, config authority, threshold, time lock, members and permissions.

Checked 2026-10-11

Deploying programs (opens in a new tab)

Solana documentation

Setting a program’s upgrade authority to None makes the program immutable.

Checked 2026-10-11

Token program (opens in a new tab)

Solana Program Library documentation

The SPL Token program, its mint authority and freeze authority.

Checked 2026-10-11

Token-2022 extensions (opens in a new tab)

Solana Program Library documentation

The list of Token-2022 mint extensions, several of which carry an authority of their own.

Checked 2026-10-11

Memo program (opens in a new tab)

solana-program, GitHub

The Memo program. Version 4 is deployed at Memo4c2pN8afCj432Lb7RMVKi9PbQnnW7ewFFaV3oAH; earlier versions remain readable.

Checked 2026-10-11