Making Sui Quantum Ready

Sui is advancing its cryptographic agility to mitigate quantum threats, where exposed public keys onchain could allow private key recovery via Shor’s algorithm. Google Quantum AI estimates such attacks could take minutes on a fault-tolerant quantum machine by March 2026. Federal deadlines for post-quantum cryptography have been accelerated, with NIST and Executive Order 14412 requiring adoption by 2030–2031 for sensitive systems. Sui’s approach avoids a network rebuild by adding signature schemes as routine updates, preserving existing functionality while enabling quantum resistance.

The network will adopt ML-DSA-65 (FIPS 204) for native accounts, prioritizing Level 3 security following a July 2026 incident where an AI model reduced HAWK’s key strength by half in 60 hours. Hash-based SLH-DSA-SHA2-128s (FIPS 205) will secure smart contract vaults, ensuring compatibility with evolving industry standards. Both schemes follow NIST’s post-quantum roadmap and leverage different mathematical foundations to reduce single-point failure risks. The changes are additive and opt-in, with no forced migrations or disruptions to existing accounts or applications.

Sui’s implementation maintains backward compatibility, as post-quantum keys derive from existing recovery phrases and wallets function unchanged. Address aliases allow accounts to update authorization keys without altering addresses or assets. Transaction size increases due to larger post-quantum signatures are mitigated by Sui’s transaction limits and programmable blocks, with verification costs remaining comparable to Ed25519. Independent audits are ongoing, and timelines remain flexible pending review and Testnet feedback, with quantum-safe vaults slated for Mainnet this year and native accounts on Testnet by year-end.

Quantum-safe features will roll out incrementally, starting with vaults and later expanding to native account authentication by Q1 2027. Multisig support will allow accounts to require both classical and post-quantum keys for authorization. The updates follow the same non-disruptive path as prior features like zkLogin and passkeys, avoiding hard forks or downtime. Sui emphasizes that the changes are preparatory, not a claim of full quantum resistance today, and advises users to monitor official channels for further developments and security guidance.