Qlyphs Why post-quantum
What quantum-resistant signatures protect on Quantus, and where the limits are.
What happens to your coins on the day a computer can forge today's signatures?
The problem
Most blockchains sign transactions with elliptic-curve schemes (ECDSA, Ed25519). A large enough quantum computer running Shor's algorithm could derive a private key from its public key, and so spend from any account whose public key is known. On most chains, that is every account that has ever sent a transaction.
Nobody can say when such a machine will exist. But a blockchain is a permanent public record: keys exposed today stay exposed.
What Quantus does
This Qlyphs wallet signs Quantus transactions with ML-DSA-87, using the official Quantus SDK. ML-DSA is the lattice-based signature scheme standardized by NIST in FIPS 204. This does not mean every Quantus wallet uses the same parameter set or derives the same address.
Qlyphs Wallet creates ML-DSA-87 accounts with the official Quantus SDK. Your keys are derived from
a 24-word recovery phrase (BIP-39) on the path m/44'/189189'/0'/0'/0', so the same phrase opens
the same account only when another wallet also uses the same signing scheme, derivation path
and account index. Check those settings and compare the resulting address before relying on
an import.
Hashes, too
Signatures are not the only thing a quantum computer threatens. Grover's algorithm speeds up the search for hash preimages; collision resistance is a different property with different bounds. Qlyphs witness proofs use SHA-512. Their security also depends on the proof format, implementation and trust policy, not just the hash function's output size.
What it does not cover
Post-quantum signatures protect your account on the chain. They do not make everything around it post-quantum:
- Your device. Malware on your computer can read what you type, including your password.
- The connection. Websites, including keys.qlyphs.com, are served over standard HTTPS.
- Updates. Browser stores sign extension updates with classical cryptography.
- Other chains. Assets and wallets on other blockchains use their own, mostly classical, signatures.
Post-quantum does not mean unhackable. Your recovery phrase is still the key to everything: keep it offline and never share it.