Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

At OPNEXT 2026, our Director Jonas Nick explained how a soft fork could add post-quantum security to Bitcoin's Taproot tree. Outputs commit to both Schnorr and PQ keys. Schnorr signatures stay cheap. The PQ path sits dormant until a cryptographically relevant quantum computer emerges.

Blockstream Research

3,783 subscribers

10,331 views • 3 months ago •via X (Twitter)

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Hash-based signatures for Bitcoin's post-quantum future? with Jonas Nick | SLP713 Bitcoin researcher Blockstream and bitcoin/secp256k1 contributor, Jonas Nick joins me to discuss how quantum computing could impact Bitcoin’s security. We explore post-quantum cryptography, hash-based signatures, impact on hardware wallets, the controversial block size trade-offs and more. (00:00) - Intro (01:49) - How real is quantum risk to Bitcoin? (04:39) - When could quantum pose a threat to Bitcoin’s cryptography? (09:56) - Long range vs Short range attacks (12:37) - How many coins are vulnerable to Long range attacks? (14:12) - Different types of cryptography and exploring Hash-based signature schemes (17:00) - Categories of Hash-based signature scheme and their pros & cons (23:42) - How do Hash-based signatures work? (32:14) - Would Lightning, Multi-sig, Taproot, Silent Payments, Atomic swaps work in a post-quantum world? (38:50) - What are Adaptor signatures & how do they affect atomic swapping? (41:27) - Will we need new Bitcoin hardware wallets?; Signature production & verification (44:41) - Signature size and Bitcoin block capacity implications (46:52) - Should we revisit the block size conversation? (54:57) - Overview of SPHINCS+ & SHRINCS (59:49) - Transitioning to post-quantum signature schemes; Overview of BIP 360 (1:09:06) - Closing thoughts

Hash-based signatures for Bitcoin's post-quantum future? with Jonas Nick | SLP713 Bitcoin researcher Blockstream and bitcoin/secp256k1 contributor, Jonas Nick joins me to discuss how quantum computing could impact Bitcoin’s security. We explore post-quantum cryptography, hash-based signatures, impact on hardware wallets, the controversial block size trade-offs and more. (00:00) - Intro (01:49) - How real is quantum risk to Bitcoin? (04:39) - When could quantum pose a threat to Bitcoin’s cryptography? (09:56) - Long range vs Short range attacks (12:37) - How many coins are vulnerable to Long range attacks? (14:12) - Different types of cryptography and exploring Hash-based signature schemes (17:00) - Categories of Hash-based signature scheme and their pros & cons (23:42) - How do Hash-based signatures work? (32:14) - Would Lightning, Multi-sig, Taproot, Silent Payments, Atomic swaps work in a post-quantum world? (38:50) - What are Adaptor signatures & how do they affect atomic swapping? (41:27) - Will we need new Bitcoin hardware wallets?; Signature production & verification (44:41) - Signature size and Bitcoin block capacity implications (46:52) - Should we revisit the block size conversation? (54:57) - Overview of SPHINCS+ & SHRINCS (59:49) - Transitioning to post-quantum signature schemes; Overview of BIP 360 (1:09:06) - Closing thoughts

Stephan Livera

45,684 views • 8 months ago

BITCOIN RAILS #59: Post-Quantum Bitcoin Signatures (+ their tradeoffs) | with BIP 360 co-author Ethan ✨ is on BlueSky✨ Heilman 🐱 and Blockstream Head of Research Jonas Nick 🔗 YOUTUBE: 🌿 SPOTIFY: According to BIP 360 co-author Ethan Heilman, Bitcoin needs a minimum of two soft forks to become quantum resistant: P2MR (or an output type that can safely execute PQ signatures) + a post-quantum checksig (signature scheme). Ethan and the BIP 360 team (including myself and Hunter Beast 🕯️) introduced the P2MR part via a BIP 360 update late last year—but the question remains, what’s the most appropriate PQ signature scheme for Bitcoin? They all have substantive tradeoffs, but hash-based signatures seem to be leading technical discourse—likely due to recent optimizations by Jonas Nick and the broader Blockstream research team. It was an honor to sit down with both of these men - arguably the two most influential and productive cryptographers in Bitcoin quantum mitigation right now - for an in-depth review of the leading PQ signature schemes and a temperature check on Bitcoin’s post-quantum planning process. TBH, if you want to skip the noise and jump straight to the signal on quantum, this is the interview to watch. In this episode, we discuss: - What needs to happen at the soft fork, infra, and mitigation levels to fully quantum-harden Bitcoin - Recent updates to BIP 360 + breakdown of the leading hash-based signatures schemes for Bitcoin (SHRINCS + SHRIMPS) - Why we may actually get consensus around a stateful scheme for Bitcoin - Comparisons of hash-based signatures vs Lattice and Isogeny-based schemes - Assessing the risks of both waiting too long and acting too fast (and why quantum is a better threat to be facing than a potential classical attack) This episode of Bitcoin Rails is brought to you by my NEW sponsors: - LayerTwo Labs LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301) - Hashi on Sui — a primitive for executing Bitcoin Defi transactions, without having to trust a federated bridge or other centralized entity - BitBox BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount TIMESTAMPS: 00:00 Intro 02:18 Ethan’s Quantum Wakeup 05:18 How Blockstream Enters Post Quantum 09:25 BIP 360 Explained 12:11 How Bitcoin Transitions to PQ 17:35 Choosing Post Quantum Signatures 23:20 How Blockstream Created SHRINCS 27:22 Signature Budgets Importance Explained 41:13 What are SHRIMPS? 44:51 SHRIMPS vs SHRINCS 47:48 Why SLH-DSA Alone Won’t Cut It 49:24 Is a SHRIMPS + SHRINCS BIP Coming? 51:51 Blockstream’s Big Plans for Liquid 59:04 Quantum Readiness Roadmap 01:02:22 Importance of a PQ Recovery Plan 01:05:35 How Long Would a PQ Migration Take 01:11:17 Quantum Watchlist Recommendations

BITCOIN RAILS #59: Post-Quantum Bitcoin Signatures (+ their tradeoffs) | with BIP 360 co-author Ethan ✨ is on BlueSky✨ Heilman 🐱 and Blockstream Head of Research Jonas Nick 🔗 YOUTUBE: 🌿 SPOTIFY: According to BIP 360 co-author Ethan Heilman, Bitcoin needs a minimum of two soft forks to become quantum resistant: P2MR (or an output type that can safely execute PQ signatures) + a post-quantum checksig (signature scheme). Ethan and the BIP 360 team (including myself and Hunter Beast 🕯️) introduced the P2MR part via a BIP 360 update late last year—but the question remains, what’s the most appropriate PQ signature scheme for Bitcoin? They all have substantive tradeoffs, but hash-based signatures seem to be leading technical discourse—likely due to recent optimizations by Jonas Nick and the broader Blockstream research team. It was an honor to sit down with both of these men - arguably the two most influential and productive cryptographers in Bitcoin quantum mitigation right now - for an in-depth review of the leading PQ signature schemes and a temperature check on Bitcoin’s post-quantum planning process. TBH, if you want to skip the noise and jump straight to the signal on quantum, this is the interview to watch. In this episode, we discuss: - What needs to happen at the soft fork, infra, and mitigation levels to fully quantum-harden Bitcoin - Recent updates to BIP 360 + breakdown of the leading hash-based signatures schemes for Bitcoin (SHRINCS + SHRIMPS) - Why we may actually get consensus around a stateful scheme for Bitcoin - Comparisons of hash-based signatures vs Lattice and Isogeny-based schemes - Assessing the risks of both waiting too long and acting too fast (and why quantum is a better threat to be facing than a potential classical attack) This episode of Bitcoin Rails is brought to you by my NEW sponsors: - LayerTwo Labs LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301) - Hashi on Sui — a primitive for executing Bitcoin Defi transactions, without having to trust a federated bridge or other centralized entity - BitBox BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount TIMESTAMPS: 00:00 Intro 02:18 Ethan’s Quantum Wakeup 05:18 How Blockstream Enters Post Quantum 09:25 BIP 360 Explained 12:11 How Bitcoin Transitions to PQ 17:35 Choosing Post Quantum Signatures 23:20 How Blockstream Created SHRINCS 27:22 Signature Budgets Importance Explained 41:13 What are SHRIMPS? 44:51 SHRIMPS vs SHRINCS 47:48 Why SLH-DSA Alone Won’t Cut It 49:24 Is a SHRIMPS + SHRINCS BIP Coming? 51:51 Blockstream’s Big Plans for Liquid 59:04 Quantum Readiness Roadmap 01:02:22 Importance of a PQ Recovery Plan 01:05:35 How Long Would a PQ Migration Take 01:11:17 Quantum Watchlist Recommendations

Isabel Foxen Duke⚡️

24,109 views • 4 months ago

Bitcoin Rails x MARA Foundation presents: THE POLITICS OF POST-QUANTUM BITCOIN | with Nic Carter 🔗 YouTube: 🌿Spotify: Less than nine months ago, investor and researcher nic carter sparked one of the most heated debates in Bitcoin's recent history — when he published a series of essays arguing that the network should prepare for its post-quantum transition sooner rather than later. While the essays broadly persuaded investors and institutions, many of Bitcoin's technical leaders dismissed them as alarmist — that is, until Google's quantum resource estimates were updated just a few months later. Crediting Google's paper with "shifting the Overton Window" on quantum and strengthening the case for post-quantum preparation, Nic shares his thoughts on the delicate politics surrounding this transition — and how he believes a quantum attack and response could potentially play out in practice. In more detail, this special episode of Bitcoin Rails X MARA Foundation TV covers: - How a quantum attack could realistically unfold + the different ways stakeholder groups might respond - The constitutional tensions surfaced by quantum vulnerable coins and how incentives will ultimately dictate outcomes - How a state actor could facilitate "benevolent" quantum recovery and eliminate the need for a contentious fork - The role and influence of institutional investors as key players in quantum outcomes - How Bitcoin's post-quantum transition could permanently reshape Bitcoin’s governance structures ...or build them from the ground up TIMESTAMPS: 00:00 — Intro 00:18 — Nick's path from Fidelity to founding Castle Island 07:00 — How quantum went from FUD to Nick's biggest concern 12:45 — Why Core devs refuse to be accountable 26:09 — Investors vs developers: who took quantum seriously first 32:33 — Bitcoin's "pre-constitutional" governance problem 39:18 — Satoshi's coins: liquidate, burn, slow-bleed, or let the government take them 47:36 — Why there will never be another Bitcoin fork war 01:01:35 — Bitcoin is about to choose the wrong signature scheme 01:09:42 — The actual deadline: why PQ signatures need to ship in 2026 01:13:09 — The happy path, the coup, and why Bitcoin won't die

Bitcoin Rails x MARA Foundation presents: THE POLITICS OF POST-QUANTUM BITCOIN | with Nic Carter 🔗 YouTube: 🌿Spotify: Less than nine months ago, investor and researcher nic carter sparked one of the most heated debates in Bitcoin's recent history — when he published a series of essays arguing that the network should prepare for its post-quantum transition sooner rather than later. While the essays broadly persuaded investors and institutions, many of Bitcoin's technical leaders dismissed them as alarmist — that is, until Google's quantum resource estimates were updated just a few months later. Crediting Google's paper with "shifting the Overton Window" on quantum and strengthening the case for post-quantum preparation, Nic shares his thoughts on the delicate politics surrounding this transition — and how he believes a quantum attack and response could potentially play out in practice. In more detail, this special episode of Bitcoin Rails X MARA Foundation TV covers: - How a quantum attack could realistically unfold + the different ways stakeholder groups might respond - The constitutional tensions surfaced by quantum vulnerable coins and how incentives will ultimately dictate outcomes - How a state actor could facilitate "benevolent" quantum recovery and eliminate the need for a contentious fork - The role and influence of institutional investors as key players in quantum outcomes - How Bitcoin's post-quantum transition could permanently reshape Bitcoin’s governance structures ...or build them from the ground up TIMESTAMPS: 00:00 — Intro 00:18 — Nick's path from Fidelity to founding Castle Island 07:00 — How quantum went from FUD to Nick's biggest concern 12:45 — Why Core devs refuse to be accountable 26:09 — Investors vs developers: who took quantum seriously first 32:33 — Bitcoin's "pre-constitutional" governance problem 39:18 — Satoshi's coins: liquidate, burn, slow-bleed, or let the government take them 47:36 — Why there will never be another Bitcoin fork war 01:01:35 — Bitcoin is about to choose the wrong signature scheme 01:09:42 — The actual deadline: why PQ signatures need to ship in 2026 01:13:09 — The happy path, the coup, and why Bitcoin won't die

Isabel Foxen Duke⚡️

51,026 views • 2 months ago

"I love it when people who have absolutely no idea in the subject speak about the subject." Charles Hoskinson didn't just argue quantum is a real threat. He laid out his credentials and then walked through the math. → Worked on NIST standards → 250+ research publications → Wrote the first paper on Bitcoin vs. quantum adversary (2019) → Building post-quantum systems → References DARPA QBI: 11 companies through phase one → Greater than 50% probability of quantum capability by 2033 Bitcoin's three quantum options: → Option 1: Do nothing. Entire system breaks. → Option 2: Soft fork. Add post-quantum signatures. 15-20% of supply gets stolen from vulnerable legacy keys. → Option 3: BIP 361. Force migration. Freeze non-migrated coins. ~1.7 million BTC lost. Mostly Satoshi's.

"I love it when people who have absolutely no idea in the subject speak about the subject." Charles Hoskinson didn't just argue quantum is a real threat. He laid out his credentials and then walked through the math. → Worked on NIST standards → 250+ research publications → Wrote the first paper on Bitcoin vs. quantum adversary (2019) → Building post-quantum systems → References DARPA QBI: 11 companies through phase one → Greater than 50% probability of quantum capability by 2033 Bitcoin's three quantum options: → Option 1: Do nothing. Entire system breaks. → Option 2: Soft fork. Add post-quantum signatures. 15-20% of supply gets stolen from vulnerable legacy keys. → Option 3: BIP 361. Force migration. Freeze non-migrated coins. ~1.7 million BTC lost. Mostly Satoshi's.

The Rollup

41,181 views • 5 months ago

Can a sufficiently powerful quantum computer forge the signatures used to authorize Bitcoin and Ethereum transactions? What would it take to upgrade both networks before that happens? In this new lecture, Stanford cryptographer Dan Boneh explores why blockchains may turn to signatures built from hash functions. He also presents new research on threshold signing. The talk ends with the questions Bitcoin still has to answer, including whether post-quantum signatures will require larger blocks, what happens to abandoned coins, and how someone such as Satoshi could prove ownership after Bitcoin’s current signatures have been retired. 00:00 Why blockchains need to prepare for quantum computers 03:05 Why Bitcoin may bet on hash-based signatures 06:25 The “big footgun” in stateful signatures 08:58 A quantum-safe signature that takes one billion hashes 14:13 Inside SLH-DSA’s virtual tree 20:30 How Bitcoin and Ethereum could make the switch 23:48 What happens when a wallet loses its state? 32:47 Can threshold signing survive the quantum transition? 36:39 How to hide lattice cryptography from the blockchain 38:49 Why threshold one-time signatures seem impossible 45:36 How context prevents forged signatures 49:37 The forgotten idea behind Winternitz signatures 54:50 Turning one-time signatures into threshold signatures 1:04:27 Will quantum-safe signatures require bigger Bitcoin blocks? 1:06:26 Abandoned bitcoin and Satoshi’s recovery problem

Can a sufficiently powerful quantum computer forge the signatures used to authorize Bitcoin and Ethereum transactions? What would it take to upgrade both networks before that happens? In this new lecture, Stanford cryptographer Dan Boneh explores why blockchains may turn to signatures built from hash functions. He also presents new research on threshold signing. The talk ends with the questions Bitcoin still has to answer, including whether post-quantum signatures will require larger blocks, what happens to abandoned coins, and how someone such as Satoshi could prove ownership after Bitcoin’s current signatures have been retired. 00:00 Why blockchains need to prepare for quantum computers 03:05 Why Bitcoin may bet on hash-based signatures 06:25 The “big footgun” in stateful signatures 08:58 A quantum-safe signature that takes one billion hashes 14:13 Inside SLH-DSA’s virtual tree 20:30 How Bitcoin and Ethereum could make the switch 23:48 What happens when a wallet loses its state? 32:47 Can threshold signing survive the quantum transition? 36:39 How to hide lattice cryptography from the blockchain 38:49 Why threshold one-time signatures seem impossible 45:36 How context prevents forged signatures 49:37 The forgotten idea behind Winternitz signatures 54:50 Turning one-time signatures into threshold signatures 1:04:27 Will quantum-safe signatures require bigger Bitcoin blocks? 1:06:26 Abandoned bitcoin and Satoshi’s recovery problem

a16z crypto

119,977 views • 1 month ago

What do Bitcoiners do about Quantum? with Matt Corallo | SLP719 Matt Corallo 🟠, Bitcoin & Lightning developer at Spiral joins me to discuss the threat of Q-Day on Bitcoin, and his ideas on how to gracefully deal with it. (00:00) - Intro (00:51) - Quantum computing timelines (03:38) - Are Bitcoin developers taking the quantum threat seriously? (07:41) - Evaluating the quantum threat (10:00) - The 'Matt Corallo Quantum Plan' (17:48) - Future community decisions on quantum security (20:12) - Will Bitcoin need a soft fork? (23:30) - Market response to quantum threat (28:15) - The role of seed phrases in quantum security (33:40) - Post quantum cryptographic schemes (37:23) - Patoshi miner adapting to Q-Day (43:25) - Which public cryptography scheme is most suitable? (50:20) - Closing thoughts

What do Bitcoiners do about Quantum? with Matt Corallo | SLP719 Matt Corallo 🟠, Bitcoin & Lightning developer at Spiral joins me to discuss the threat of Q-Day on Bitcoin, and his ideas on how to gracefully deal with it. (00:00) - Intro (00:51) - Quantum computing timelines (03:38) - Are Bitcoin developers taking the quantum threat seriously? (07:41) - Evaluating the quantum threat (10:00) - The 'Matt Corallo Quantum Plan' (17:48) - Future community decisions on quantum security (20:12) - Will Bitcoin need a soft fork? (23:30) - Market response to quantum threat (28:15) - The role of seed phrases in quantum security (33:40) - Post quantum cryptographic schemes (37:23) - Patoshi miner adapting to Q-Day (43:25) - Which public cryptography scheme is most suitable? (50:20) - Closing thoughts

Stephan Livera

23,851 views • 7 months ago

MFTV #12: Investor Sentiment on Bitcoin's Quantum Transition | with BlackRock Digital Assets' Will Su 🔗 YouTube: 🔗 Spotify: According to Director of Research for BlackRock Digital Assets, Will Su, uncertainty around advances in quantum computing may be the biggest unanswered question facing prospective Bitcoin investors today. He speaks with Head of MARA Foundation Isabel Foxen Duke⚡️ in this episode — sharing how BlackRock thinks about quantum risk, how their clients are responding to quantum advancements, and what Bitcoin developers can do to preserve investor confidence as this technology evolves. MORE ON MFTV WITH BLACKROCK → - How BlackRock evaluates risks associated with Quantum Computing - How investors are pricing these risks and effects on adoption today - What investors want to see from developers to feel comfortable going forward - How BlackRock views the "quantum timeline" and developers' race against the clock TIMESTAMPS: 00:00 — Intro 00:57 — Will before BlackRock 06:50 — Why BlackRock published a quantum paper 14:24 — The mitigation timeline debate 21:51 — What BlackRock wants from the PQ debate 29:27 — Why quantum concern is dampening adoption 41:18 — Developers stepping up 45:53 — Hardware and hybrid quantum architectures 53:15 — Are corporations overstepping? 59:38 — Corporate involvement in Bitcoin's PQ transition

MFTV #12: Investor Sentiment on Bitcoin's Quantum Transition | with BlackRock Digital Assets' Will Su 🔗 YouTube: 🔗 Spotify: According to Director of Research for BlackRock Digital Assets, Will Su, uncertainty around advances in quantum computing may be the biggest unanswered question facing prospective Bitcoin investors today. He speaks with Head of MARA Foundation Isabel Foxen Duke⚡️ in this episode — sharing how BlackRock thinks about quantum risk, how their clients are responding to quantum advancements, and what Bitcoin developers can do to preserve investor confidence as this technology evolves. MORE ON MFTV WITH BLACKROCK → - How BlackRock evaluates risks associated with Quantum Computing - How investors are pricing these risks and effects on adoption today - What investors want to see from developers to feel comfortable going forward - How BlackRock views the "quantum timeline" and developers' race against the clock TIMESTAMPS: 00:00 — Intro 00:57 — Will before BlackRock 06:50 — Why BlackRock published a quantum paper 14:24 — The mitigation timeline debate 21:51 — What BlackRock wants from the PQ debate 29:27 — Why quantum concern is dampening adoption 41:18 — Developers stepping up 45:53 — Hardware and hybrid quantum architectures 53:15 — Are corporations overstepping? 59:38 — Corporate involvement in Bitcoin's PQ transition

MARA Foundation

12,047 views • 2 months ago

🚀 SEALSQ $LAES at Times Square — Leading the Future of Quantum & AI Security! We’re proud to share that SEALSQ was featured today on the Nasdaq Tower in Times Square, announcing that our CEO Carlos Moreira will deliver the Opening Keynote at IQT Quantum + AI 2025, taking place October 19–21 in New York City. 🎤 Keynote: “AI Meets Quantum: Building Unbreakable Post-Quantum Security” Carlos will explore how AI and Quantum Computing are converging to redefine cybersecurity and shape the next era of digital trust. He will also join Panel 8: CEO Roundtable, alongside top executives from Rigetti, ORCA, SEEQC, and Arqit, to discuss the business and technology strategies driving the quantum revolution. 🔐 During the event, SEALSQ will present updates on its groundbreaking Quantum Shield “QS7001” — a RISC-V-based post-quantum secure hardware platform — and the progress of its Common Criteria EAL5+ certification with Serma Labs. The QS7001 platform integrates Kyber and Dilithium (NIST-standardized post-quantum algorithms) with advanced hardware accelerators for low-latency, high-throughput encryption, ensuring robust protection for IoT, automotive, healthcare, and critical infrastructure systems. 🌐 With this innovation, SEALSQ enables partners to future-proof devices against both classical and quantum attacks, ensuring compliance, efficiency, and trust in a rapidly evolving digital landscape. 💬 “Quantum and AI represent both opportunity and risk. With the Quantum Shield QS7001 platform and our broader post-quantum roadmap, SEALSQ is building the security foundation required to protect critical infrastructure, connected devices, and human data against the threats of tomorrow.” — Carlos Moreira, CEO, SEALSQ 📍 Event Details: 🗓️ October 19–21, 2025 📍 New York City 🎤 Opening Keynote: “AI Meets Quantum: Building Unbreakable Post-Quantum Security” 👤 Speaker: Carlos Moreira, CEO, SEALSQ 💼 Panel 8: CEO Roundtable featuring Rigetti, ORCA, SEEQC, Arqit, and SEALSQ #SEALSQ #PostQuantum #AI #QuantumComputing #Cybersecurity #TimesSquare #Nasdaq #IQT2025 #Innovation #RISC-V #Kyber #Dilithium #FutureOfSecurity

🚀 SEALSQ $LAES at Times Square — Leading the Future of Quantum & AI Security! We’re proud to share that SEALSQ was featured today on the Nasdaq Tower in Times Square, announcing that our CEO Carlos Moreira will deliver the Opening Keynote at IQT Quantum + AI 2025, taking place October 19–21 in New York City. 🎤 Keynote: “AI Meets Quantum: Building Unbreakable Post-Quantum Security” Carlos will explore how AI and Quantum Computing are converging to redefine cybersecurity and shape the next era of digital trust. He will also join Panel 8: CEO Roundtable, alongside top executives from Rigetti, ORCA, SEEQC, and Arqit, to discuss the business and technology strategies driving the quantum revolution. 🔐 During the event, SEALSQ will present updates on its groundbreaking Quantum Shield “QS7001” — a RISC-V-based post-quantum secure hardware platform — and the progress of its Common Criteria EAL5+ certification with Serma Labs. The QS7001 platform integrates Kyber and Dilithium (NIST-standardized post-quantum algorithms) with advanced hardware accelerators for low-latency, high-throughput encryption, ensuring robust protection for IoT, automotive, healthcare, and critical infrastructure systems. 🌐 With this innovation, SEALSQ enables partners to future-proof devices against both classical and quantum attacks, ensuring compliance, efficiency, and trust in a rapidly evolving digital landscape. 💬 “Quantum and AI represent both opportunity and risk. With the Quantum Shield QS7001 platform and our broader post-quantum roadmap, SEALSQ is building the security foundation required to protect critical infrastructure, connected devices, and human data against the threats of tomorrow.” — Carlos Moreira, CEO, SEALSQ 📍 Event Details: 🗓️ October 19–21, 2025 📍 New York City 🎤 Opening Keynote: “AI Meets Quantum: Building Unbreakable Post-Quantum Security” 👤 Speaker: Carlos Moreira, CEO, SEALSQ 💼 Panel 8: CEO Roundtable featuring Rigetti, ORCA, SEEQC, Arqit, and SEALSQ #SEALSQ #PostQuantum #AI #QuantumComputing #Cybersecurity #TimesSquare #Nasdaq #IQT2025 #Innovation #RISC-V #Kyber #Dilithium #FutureOfSecurity

Carlos Creus Moreira

12,991 views • 11 months ago

Ethereum Researcher Justin Drake, who co-authored Google's recent quantum paper: "I've stopped thinking about post-quantum as a hurdle that we have to overcome, and I think of it more as an opportunity. It's an opportunity for Ethereum to stand out as the very first global financial system that is post-quantum secure — not just relative to its competitors, but also relative to fiat and tradfi." Justin also believes quantum presents an opportunity for Ethereum to become the best version of itself: “The move to post-quantum is essentially a rewrite, and that’s a massive opportunity to start with a clean slate and wipe our technical debt.” The rewrite bundles post-quantum security with a new ZK virtual machine (LeanVM) that can snarkify the entire consensus layer in real time. The result is that the Ethereum L1 can scale to 10,000 TPS at 1 gigagas/second — while simultaneously becoming quantum-secure. Source: Bankless (Mar 2026)

Ethereum Researcher Justin Drake, who co-authored Google's recent quantum paper: "I've stopped thinking about post-quantum as a hurdle that we have to overcome, and I think of it more as an opportunity. It's an opportunity for Ethereum to stand out as the very first global financial system that is post-quantum secure — not just relative to its competitors, but also relative to fiat and tradfi." Justin also believes quantum presents an opportunity for Ethereum to become the best version of itself: “The move to post-quantum is essentially a rewrite, and that’s a massive opportunity to start with a clean slate and wipe our technical debt.” The rewrite bundles post-quantum security with a new ZK virtual machine (LeanVM) that can snarkify the entire consensus layer in real time. The result is that the Ethereum L1 can scale to 10,000 TPS at 1 gigagas/second — while simultaneously becoming quantum-secure. Source: Bankless (Mar 2026)

Etherealize

186,071 views • 5 months ago

Bitcoin and Ethereum’s quantum threat is getting harder to ignore. In roughly two months, 100+ participants and their AI agents drove down the estimated cost of the arithmetic of a potential quantum attack on elliptic-curve cryptography. Their work is detailed in the new paper, with seven co-authors from StarkWare and the Starknet Foundation. The challenge focused on a calculation that a sufficiently powerful quantum computer would use to recover private keys from exposed public keys. The result: an 86.1% reduction from the challenge’s starting resource score, which combines logical qubits and key computational operations. That score was also over 50% below Google Quantum AI’s reported result for this calculation, although the circuit setups and measurement methods differ. In simple terms, algorithm improvements can reduce the resources needed for an important part of a quantum attack. For StarkWare, this complements our broader work on quantum security in blockchain, from STARK proofs and Starknet’s post-quantum roadmap to our successful quantum-safe Bitcoin transaction on mainnet. We’re helping measure the threat and build the defenses. Congratulations to our seven co-authors across StarkWare 🥷 and Starknet Foundation: Odin, sam, teddy, Akash, lucqs, robert, and Tarek | Security Engineer, alongside the wider community. Read the paper:

Bitcoin and Ethereum’s quantum threat is getting harder to ignore. In roughly two months, 100+ participants and their AI agents drove down the estimated cost of the arithmetic of a potential quantum attack on elliptic-curve cryptography. Their work is detailed in the new paper, with seven co-authors from StarkWare and the Starknet Foundation. The challenge focused on a calculation that a sufficiently powerful quantum computer would use to recover private keys from exposed public keys. The result: an 86.1% reduction from the challenge’s starting resource score, which combines logical qubits and key computational operations. That score was also over 50% below Google Quantum AI’s reported result for this calculation, although the circuit setups and measurement methods differ. In simple terms, algorithm improvements can reduce the resources needed for an important part of a quantum attack. For StarkWare, this complements our broader work on quantum security in blockchain, from STARK proofs and Starknet’s post-quantum roadmap to our successful quantum-safe Bitcoin transaction on mainnet. We’re helping measure the threat and build the defenses. Congratulations to our seven co-authors across StarkWare 🥷 and Starknet Foundation: Odin, sam, teddy, Akash, lucqs, robert, and Tarek | Security Engineer, alongside the wider community. Read the paper:

StarkWare 🥷

26,004 views • 15 days ago

WATCH: Is Google's Quantum Breakthrough a Threat to Bitcoin? | Bitcoin Policy Hour Ep 33 🇺🇸 A new Google whitepaper has accelerated the timeline for Q-Day, potentially putting Bitcoin wallet security at risk to quantum computing as early as 2029. The Bitcoin Policy Institute team breaks down the quantum threat, geopolitical strategy, and why "not your keys, not your coins" has never been more real. Feat. @bitconpolicy 's Zack Cohen Zack Shapiro Bayman11771 Sam Lyman Luke Danielian Chapters: 4:45 — Google's Quantum Paper 9:16 — Why Q-Day Is Closer Than We Thought 12:48 — Qubits Explained: Logical vs Physical 18:12 — Vulnerable Bitcoin Addresses 20:15 — Stakeholder Map 26:21 — Not Your Keys Not Your Coins 30:14 — Migration Windows and Coinbase Rewards 37:34 — Could Gov'ts Hijack Bitcoin's Quantum Fix? 46:04 — Government's Role in Quantum Defense 51:05 — AI Tools Update

WATCH: Is Google's Quantum Breakthrough a Threat to Bitcoin? | Bitcoin Policy Hour Ep 33 🇺🇸 A new Google whitepaper has accelerated the timeline for Q-Day, potentially putting Bitcoin wallet security at risk to quantum computing as early as 2029. The Bitcoin Policy Institute team breaks down the quantum threat, geopolitical strategy, and why "not your keys, not your coins" has never been more real. Feat. @bitconpolicy 's Zack Cohen Zack Shapiro Bayman11771 Sam Lyman Luke Danielian Chapters: 4:45 — Google's Quantum Paper 9:16 — Why Q-Day Is Closer Than We Thought 12:48 — Qubits Explained: Logical vs Physical 18:12 — Vulnerable Bitcoin Addresses 20:15 — Stakeholder Map 26:21 — Not Your Keys Not Your Coins 30:14 — Migration Windows and Coinbase Rewards 37:34 — Could Gov'ts Hijack Bitcoin's Quantum Fix? 46:04 — Government's Role in Quantum Defense 51:05 — AI Tools Update

Bitcoin Magazine

35,497 views • 5 months ago

QANplatform and SignQuantum provide quantum-resistant security for Ueno Bank's 2.2M customers Shortly after the announcement of SignQuantum, the world's first quantum-resistant e-signature add-on which utilizes QANplatform's quantum-resistant blockchain technology, Ueno Bank is starting its transition to quantum-resistant cybersecurity to safeguard digital operations and digitally signed documents. “Adopting SignQuantum and QANplatform’s technology both mitigates future risks and builds confidence with our customers and partners to bring a new standard of cybersecurity in the financial sector,” said Juan Manuel Gustale, President at Ueno Bank. We’re thrilled to see QANplatform’s quantum-resistant blockchain deployed in robust, real-life environments like Ueno Bank, Paraguay’s largest bank by customer base. Read more on our blog:

QANplatform and SignQuantum provide quantum-resistant security for Ueno Bank's 2.2M customers Shortly after the announcement of SignQuantum, the world's first quantum-resistant e-signature add-on which utilizes QANplatform's quantum-resistant blockchain technology, Ueno Bank is starting its transition to quantum-resistant cybersecurity to safeguard digital operations and digitally signed documents. “Adopting SignQuantum and QANplatform’s technology both mitigates future risks and builds confidence with our customers and partners to bring a new standard of cybersecurity in the financial sector,” said Juan Manuel Gustale, President at Ueno Bank. We’re thrilled to see QANplatform’s quantum-resistant blockchain deployed in robust, real-life environments like Ueno Bank, Paraguay’s largest bank by customer base. Read more on our blog:

QANplatform

27,162 views • 1 year ago

Quantum computing has long been viewed as a transformative technology, but recent breakthroughs suggest its impact may arrive much sooner than expected. At the center of growing concern is the prospect of Q-Day—the moment when a sufficiently powerful quantum computer could crack the public-key encryption that underpins global banking, government communications, military networks, cryptocurrencies, and much of the modern internet. As advances in quantum hardware, error correction, and algorithms accelerate, governments and technology companies are racing to prepare for a post-quantum world. In this interview with Cris Sheridan on the IFA Life podcast, Woodley B. Preucil, CFA, Senior Managing Director at 13D Research & Strategy, discusses why the timeline for Q-Day may have compressed dramatically, the geopolitical competition driving investment in quantum technologies, and what the coming transition means for cybersecurity, national security, and investors. Listen to the full interview here: The interview is also available to 13D clients on our media page.

Quantum computing has long been viewed as a transformative technology, but recent breakthroughs suggest its impact may arrive much sooner than expected. At the center of growing concern is the prospect of Q-Day—the moment when a sufficiently powerful quantum computer could crack the public-key encryption that underpins global banking, government communications, military networks, cryptocurrencies, and much of the modern internet. As advances in quantum hardware, error correction, and algorithms accelerate, governments and technology companies are racing to prepare for a post-quantum world. In this interview with Cris Sheridan on the IFA Life podcast, Woodley B. Preucil, CFA, Senior Managing Director at 13D Research & Strategy, discusses why the timeline for Q-Day may have compressed dramatically, the geopolitical competition driving investment in quantum technologies, and what the coming transition means for cybersecurity, national security, and investors. Listen to the full interview here: The interview is also available to 13D clients on our media page.

13D Research & Strategy

15,457 views • 2 months ago

Join the quantum-safe web3 revolution! QAN XLINK, our cross-signer protocol that makes QANplatform quantum-safe, is in the final phase and you can test it before the public release. Apply to become a member of our closed testing group and be among the first to try the QAN XLINK desktop app. QANplatform is the only blockchain that delivers both Ethereum compatibility and a 100%-guaranteed safe migration path for the post-quantum era, ensuring your security even after "Q-Day." This quantum-safe protection is provided by QAN XLINK which uses NIST's primary-recommended PQC algorithm (ML-DSA, FIPS 204). QAN XLINK enables seamless integration of every Ethereum-compatible wallet including MetaMask and Trust Wallet with quantum-safe signature-capable keypairs. You can apply using this link:

Join the quantum-safe web3 revolution! QAN XLINK, our cross-signer protocol that makes QANplatform quantum-safe, is in the final phase and you can test it before the public release. Apply to become a member of our closed testing group and be among the first to try the QAN XLINK desktop app. QANplatform is the only blockchain that delivers both Ethereum compatibility and a 100%-guaranteed safe migration path for the post-quantum era, ensuring your security even after "Q-Day." This quantum-safe protection is provided by QAN XLINK which uses NIST's primary-recommended PQC algorithm (ML-DSA, FIPS 204). QAN XLINK enables seamless integration of every Ethereum-compatible wallet including MetaMask and Trust Wallet with quantum-safe signature-capable keypairs. You can apply using this link:

QANplatform

15,811 views • 10 months ago

BITCOIN RAILS #70: THE CASE FOR LATTICE-BASED SIGNATURES IN BITCOIN | with CTO of Ledger Charles Guillemet 🔗 YouTube: 🌿 Spotify: To date, post-quantum Bitcoin discussions have largely centered on which digital signature schemes offer the strongest cryptographic security against a quantum adversary. But cryptographic assumptions are only one dimension of security. Different signature schemes introduce different implementation and operational risks. How should Bitcoin weigh cryptographic conservatism against the complexity required to deploy that cryptography safely? While hash-based signatures are often favored for their conservative assumptions, CTO of Ledger, Charles Guillemet Charles Guillemet argues that evaluating primitives in isolation can obscure consequential risks at the systems level. Stateful hash-based schemes, in particular, introduce state-management requirements where operational or user error can have catastrophic consequences —despite their conservative cryptographic foundations. In this interview, Charles and I examine the tradeoffs of hash-based signatures and his case for greater consideration of lattice-based alternatives, i.e. ML-DSA. A very juicy episode for anyone seriously assessing Bitcoin's post-quantum design landscape. This episode of Bitcoin Rails is brought to you by: LayerTwo Labs LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301) Hashi on Sui — a primitive for executing Bitcoin DeFi transactions, without having to trust a federated bridge or other centralized entity BitBox BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount TIMESTAMPS: 00:00 — Intro 01:45 — How the quantum threat became real for Ledger 09:06 — NIST influence and what Ledger built into its SDK 21:25 — ML-DSA and why Falcon might not be the right choice 25:33 — The problem with hash-based signatures 31:38 — Stateful signatures and the throughput problem 36:48 — Does user error outweigh the security difference? 42:27 — Bitcoin post-quantum migration scenario 45:15 — Maintaining multisig capabilities in a post-quantum world 55:54 — NIST standardization process and the backdoor question 1:01:06 — Trezor's approach and device authentication 1:06:09 — Ledger’s approach to post-quantum signatures

BITCOIN RAILS #70: THE CASE FOR LATTICE-BASED SIGNATURES IN BITCOIN | with CTO of Ledger Charles Guillemet 🔗 YouTube: 🌿 Spotify: To date, post-quantum Bitcoin discussions have largely centered on which digital signature schemes offer the strongest cryptographic security against a quantum adversary. But cryptographic assumptions are only one dimension of security. Different signature schemes introduce different implementation and operational risks. How should Bitcoin weigh cryptographic conservatism against the complexity required to deploy that cryptography safely? While hash-based signatures are often favored for their conservative assumptions, CTO of Ledger, Charles Guillemet Charles Guillemet argues that evaluating primitives in isolation can obscure consequential risks at the systems level. Stateful hash-based schemes, in particular, introduce state-management requirements where operational or user error can have catastrophic consequences —despite their conservative cryptographic foundations. In this interview, Charles and I examine the tradeoffs of hash-based signatures and his case for greater consideration of lattice-based alternatives, i.e. ML-DSA. A very juicy episode for anyone seriously assessing Bitcoin's post-quantum design landscape. This episode of Bitcoin Rails is brought to you by: LayerTwo Labs LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301) Hashi on Sui — a primitive for executing Bitcoin DeFi transactions, without having to trust a federated bridge or other centralized entity BitBox BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount TIMESTAMPS: 00:00 — Intro 01:45 — How the quantum threat became real for Ledger 09:06 — NIST influence and what Ledger built into its SDK 21:25 — ML-DSA and why Falcon might not be the right choice 25:33 — The problem with hash-based signatures 31:38 — Stateful signatures and the throughput problem 36:48 — Does user error outweigh the security difference? 42:27 — Bitcoin post-quantum migration scenario 45:15 — Maintaining multisig capabilities in a post-quantum world 55:54 — NIST standardization process and the backdoor question 1:01:06 — Trezor's approach and device authentication 1:06:09 — Ledger’s approach to post-quantum signatures

Isabel Foxen Duke⚡️

18,721 views • 1 month ago

BITCOIN RAILS #69: ZERO-KNOWLEDGE PROOFS FOR POST-QUANTUM BITCOIN | with Benedikt Bünz 🔗 YOUTUBE: 🌿 SPOTIFY: While many Bitcoiners remain hopeful the network will embrace zero-knowledge proofs for protocol-level use cases, practical adoption has remained limited outside of BitVM and a handful of experimental proposals. Most of the world’s ZKP research has circled around Ethereum and other ecosystems, where significant resources have been dedicated to advancing these systems, particularly for scaling and privacy applications. One of the most notable contributors to this research is Benedikt Bünz ☕️ — professor of cryptography at NYU and collaborator of Dan Boneh, who together inarguably form one of the strongest blockchain-applied cryptography teams in the world. The pair recently announced they’ll be leading the new post-quantum cryptography unit localhost research — the first dedicated PQ research effort within a major Bitcoin development organization. With Benedikt leading the charge on the use of zero-knowledge proofs for post-quantum mitigation, the question emerges: will the post-quantum transition be the catalyst to finally bring zero-knowledge proofs to Bitcoin's core protocol? In more detail, Benedikt and I discuss: - Why ZKPs haven’t been widely adopted by the Bitcoin technical community — and why the threat of quantum computers may change that posture going forward - How ZKPs could be used for signature batching to address larger post-quantum signatures in Bitcoin’s post-quantum era - Why Bitcoiners will likely prioritize hash-based signatures as an initial post-quantum scheme — rather than more efficient but less proven alternatives (e.g., lattice-based) - How ZKPs have evolved over the last decade and may finally be ready for Bitcoin’s strict requirements around trust assumptions - Why Benedikt and Dan are teaming up with localhost research to create the first post-quantum cryptography unit within a major Bitcoin development organization + what they hope to accomplish This episode of Bitcoin Rails is brought to you by: LayerTwo Labs LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301) Hashi on Sui — a primitive for executing Bitcoin DeFi transactions, without having to trust a federated bridge or other centralized entity BitBox BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount TIMESTAMPS: 00:00 — Intro 00:22 — Benedikt's background 04:10 — How Benedikt got into Bitcoin and cryptography 07:42 — First ZK project: proving exchange solvency after Mt. Gox 16:01 — ZK proofs explained 27:43 — How security gets popular & ZK proofs in Bitcoin 35:49 — Other applications of ZK proofs for Bitcoin 40:15 — Why ZK proofs haven't been adopted in Bitcoin 50:46 — Why the Bitcoin post-quantum transition needs ZK proofs 01:07:00 — Cryptographic agility and why lattices win 01:18:00 — The size problem and how SNARKs solve it 01:33:57 — Proving a Bitcoin block in a laptop in 1.5 seconds 01:37:12 — Bitcoin as the primary quantum target 01:40:47 — ZK proofs for seed phrase recovery

BITCOIN RAILS #69: ZERO-KNOWLEDGE PROOFS FOR POST-QUANTUM BITCOIN | with Benedikt Bünz 🔗 YOUTUBE: 🌿 SPOTIFY: While many Bitcoiners remain hopeful the network will embrace zero-knowledge proofs for protocol-level use cases, practical adoption has remained limited outside of BitVM and a handful of experimental proposals. Most of the world’s ZKP research has circled around Ethereum and other ecosystems, where significant resources have been dedicated to advancing these systems, particularly for scaling and privacy applications. One of the most notable contributors to this research is Benedikt Bünz ☕️ — professor of cryptography at NYU and collaborator of Dan Boneh, who together inarguably form one of the strongest blockchain-applied cryptography teams in the world. The pair recently announced they’ll be leading the new post-quantum cryptography unit localhost research — the first dedicated PQ research effort within a major Bitcoin development organization. With Benedikt leading the charge on the use of zero-knowledge proofs for post-quantum mitigation, the question emerges: will the post-quantum transition be the catalyst to finally bring zero-knowledge proofs to Bitcoin's core protocol? In more detail, Benedikt and I discuss: - Why ZKPs haven’t been widely adopted by the Bitcoin technical community — and why the threat of quantum computers may change that posture going forward - How ZKPs could be used for signature batching to address larger post-quantum signatures in Bitcoin’s post-quantum era - Why Bitcoiners will likely prioritize hash-based signatures as an initial post-quantum scheme — rather than more efficient but less proven alternatives (e.g., lattice-based) - How ZKPs have evolved over the last decade and may finally be ready for Bitcoin’s strict requirements around trust assumptions - Why Benedikt and Dan are teaming up with localhost research to create the first post-quantum cryptography unit within a major Bitcoin development organization + what they hope to accomplish This episode of Bitcoin Rails is brought to you by: LayerTwo Labs LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301) Hashi on Sui — a primitive for executing Bitcoin DeFi transactions, without having to trust a federated bridge or other centralized entity BitBox BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount TIMESTAMPS: 00:00 — Intro 00:22 — Benedikt's background 04:10 — How Benedikt got into Bitcoin and cryptography 07:42 — First ZK project: proving exchange solvency after Mt. Gox 16:01 — ZK proofs explained 27:43 — How security gets popular & ZK proofs in Bitcoin 35:49 — Other applications of ZK proofs for Bitcoin 40:15 — Why ZK proofs haven't been adopted in Bitcoin 50:46 — Why the Bitcoin post-quantum transition needs ZK proofs 01:07:00 — Cryptographic agility and why lattices win 01:18:00 — The size problem and how SNARKs solve it 01:33:57 — Proving a Bitcoin block in a laptop in 1.5 seconds 01:37:12 — Bitcoin as the primary quantum target 01:40:47 — ZK proofs for seed phrase recovery

Isabel Foxen Duke⚡️

19,872 views • 2 months ago

we just added support for bip-360 (p2mr) address, still in draft but soon. possibly the first wallet in the world to ship a quantum-ready address. bc1z is a segwit v2 output defined in bip-360. p2mr stands for pay to merkle root. unlike taproot, it commits only to a script-tree merkle root and completely removes the key-path spend. there is no internal public key embedded or committed in the output itself. in taproot, an internal public key is always part of the output, even if it is never used. with p2mr, the output contains only the merkle root of the script tree. a public key is revealed only at spend time, inside the executed script branch, not at receive time. this design avoids publishing long-lived public keys on chain in advance, reduces long-term public key exposure, and shrinks the attack surface in a potential quantum future where exposed public keys could become vulnerable. it is a structural hardening step at the address level. it does not change consensus rules, does not break existing wallets, and existing addresses continue to work as usual. job’s not done 🫡

we just added support for bip-360 (p2mr) address, still in draft but soon. possibly the first wallet in the world to ship a quantum-ready address. bc1z is a segwit v2 output defined in bip-360. p2mr stands for pay to merkle root. unlike taproot, it commits only to a script-tree merkle root and completely removes the key-path spend. there is no internal public key embedded or committed in the output itself. in taproot, an internal public key is always part of the output, even if it is never used. with p2mr, the output contains only the merkle root of the script tree. a public key is revealed only at spend time, inside the executed script branch, not at receive time. this design avoids publishing long-lived public keys on chain in advance, reduces long-term public key exposure, and shrinks the attack surface in a potential quantum future where exposed public keys could become vulnerable. it is a structural hardening step at the address level. it does not change consensus rules, does not break existing wallets, and existing addresses continue to work as usual. job’s not done 🫡

Yishi

37,709 views • 7 months ago