Why This Matters
Quantum computers will eventually break current cryptographic signatures (ECDSA, BLS). Ethereum and XDC are preparing for this by researching post-quantum cryptography. Zero-knowledge proofs provide privacy AND can be made quantum-resistant using hash-based constructions (STARKs).
Post-Quantum
Cryptography secure against quantum attacks
Zero-Knowledge
Prove statements without revealing data
Hash-Based
Simple constructions, quantum-safe
Zero-Knowledge Commitment Scheme
How It Works
A commitment scheme lets you "lock in" a value without revealing it. Later, you can reveal and prove you committed to that exact value. This is used in voting, auctions, and games.
Hash-Based Signatures (Quantum-Safe)
Post-Quantum Security
Unlike ECDSA (used by current wallets), hash-based signatures rely only on the security of hash functions—which remain secure against quantum computers. This demo shows a simplified Lamport-style one-time signature.
Merkle Tree Proof (Inclusion Proof)
Foundation of ZK-Rollups & Airdrops
Merkle trees let you prove that an item belongs to a set without revealing the entire set. Used in airdrops (prove you're on the list), rollups (prove transaction inclusion), and state proofs.
Cryptography Comparison
| Algorithm | Type | Classical Security | Quantum Security | Used In |
|---|---|---|---|---|
| ECDSA (secp256k1) | Signature | ✓ Safe | ✗ Broken by Shor's | Bitcoin, Ethereum, XDC |
| BLS | Signature | ✓ Safe | ✗ Broken by Shor's | Ethereum 2.0 validators |
| Keccak-256 | Hash | ✓ Safe | ✓ Reduced to 128-bit* | Ethereum addresses |
| Lamport | Signature | ✓ Safe | ✓ Quantum-Safe | Research, post-quantum |
| SPHINCS+ | Signature | ✓ Safe | ✓ NIST Standard | Future wallets |
| Dilithium | Signature | ✓ Safe | ✓ NIST Standard | Future TLS, blockchain |
| STARKs | ZK Proof | ✓ Safe | ✓ Hash-based | StarkNet, scaling |
* Grover's algorithm halves effective security of hash functions
Ethereum Foundation Research
KZG Replacement
Replace quantum-vulnerable KZG commitments with hash-based alternatives
STARK Aggregation
Use STARKs for validator signature aggregation instead of BLS
Account Abstraction
Enable wallets to use any signature scheme, including post-quantum