chiknstitute

771 posts

chiknstitute

chiknstitute

@chiknstitute

research & development in guerrilla marketing

Katılım Eylül 2022
337 Takip Edilen538 Takipçiler
Sabitlenmiş Tweet
chiknstitute
chiknstitute@chiknstitute·
$QRL is not a meme coin pump bs, it’s literally an existential utility keeping quantum computers from decrypting people’s private keys from public keys. No bs patch work. Quantum resistant since the beginning of genesis. Pure quantum resistant play of the decade.
English
1
7
39
1K
0x_Web3AI π² .ink (❖,❖)🫎 "∞ TΛNSSI"
@Cointelegraph The Threat: Large-scale quantum computers will eventually break RSA and ECC encryption. Adversaries are already practicing "Harvest Now, Decrypt Later" (stealing encrypted data today to unlock it once quantum power matures).
English
1
0
2
440
Cointelegraph
Cointelegraph@Cointelegraph·
🚨 UPDATE: Google sets 2029 deadline for post-quantum cryptography migration as quantum threats draw nearer.
Cointelegraph tweet media
English
82
109
593
160.3K
chiknstitute retweetledi
BlackRock
BlackRock@BlackRock·
CPUs. GPUs. And now—QPUs. Quantum computing isn’t replacing today’s technology —it’s expanding what’s possible. BlackRock’s Tony Kim explains how quantum works, what makes it different, and why it could define the next era of computing.
English
35
141
415
42.6K
Altcoin Buzz
Altcoin Buzz@Altcoinbuzzio·
$300,000,000 IN CORPORATE WEALTH WAS JUST INJECTED INTO THE ECOSYSTEM. A massive publicly traded entity entirely rebranded to AVAX One Technology to signal absolute conviction. They are violently deploying their massive corporate treasury directly into the network to structurally capitalize on base layer yield. The legacy financial system is systematically cannibalizing itself to secure digital real estate before the supply completely dries up. Position your capital exactly where the heavy corporate treasuries are violently deploying theirs.
Altcoin Buzz tweet media
English
13
21
169
3.9K
RyanEire 🔺💧 🦧
RyanEire 🔺💧 🦧@Ryan02020419·
This is HUGE. 🔺🔥 When a giant like BlackRock 🏦 moves into $AVAX, it’s not speculation anymore, it’s validation. $AVAX is proving itself as the destination for serious capital, serious builders, and now… serious institutional yield. The fact that BlackRock is actively tapping into native yield on $AVAX tells you everything you need to know about where the future is heading. Speed, scalability, and real-world utility, $AVAX is delivering on all fronts. 🚀 This isn’t just adoption… this is acceleration. And $AVAX is right at the center of it. If this is where the biggest asset manager in the world is going, you already know $AVAX is just getting started. 👀 Next targets? Doesn’t matter $AVAX already set the standard. 💪 Super bullish on $AVAX… Always 🔺🔥
RyanEire 🔺💧 🦧 tweet media
Altcoin Buzz@Altcoinbuzzio

THE LARGEST ASSET MANAGER ON EARTH IS ACCUMULATING DECENTRALIZED YIELD. BlackRock officially expanded its massive institutional suite directly to the Avalanche network. Their dedicated staking fund actively extracts native yield for massive traditional capital. What specific smart contract network do you think they aggressively target next?

English
8
25
205
9.3K
pythonomics
pythonomics@pythonomics·
My net worth peaked at $3 million. None of it was real. I don't mean that philosophically. I mean it was located on a blockchain that has since been creating fake metrics. I own bags of avax memecoins across multiple narratives. Three are chicken themed. Four are arena rugs. Two are cat themed. One a mascot of the chain. And a bag of Arena that I bought for $100,000 because Jony Sarkar said it would “go turbo ballistic sooner than you think.” The Arena launched agents last week. It's an app for bots now. Last year I mass DM'd 340 people the phrase "buy nochill." I have since stopped doing that. Not because I was wrong. Because most of them blocked me. I got into Avalanche in 2023. Everyone was buying. Someone paid $20,000 to be in Crypto Kaleo’s chat room. On a chat website. With no alpha. I called myself a “memecoin conossieur." I put it in my Twitter bio. I put it in my LinkedIn headline. I said it on a space that had eleven listeners. Three of them were bots. The rest were my alts. My bag of avax memecoins have had more red days than an average woman has during a lifetime. I own 0 assets outside this chain. Portability, technology, community. My most valuable asset was a token called nochill. It pumped once and then went sideways for a year. Nobody buys it. It's like holding a bag of beanie babies & expecting a new wave of interest. I held. Diamond hands. That's what we said. "Diamond hands." It means refusing to sell while your investment loses 94% of its value. We turned financial paralysis into a personality trait. We even got NFTs airdropped to us congratulating us for it. A guy in my Telegram staked $2.4 million for 0.5% APY on Trader Joe. Chain supported. High visibility. I asked him what "high visibility" meant when the chain had 4 daily active users. He said I didn't understand the technology. I didn't. I still bought more. We launched an NFT. A non fungible token. That means our token had a picture that was unique. There were nine of us. Three sold for +20%. Two used it to launch rug pulls. The other four were me and my alts. We coined it "going wide." The width went on forever. My portfolio peaked at $3 million. I told everyone. I made a spreadsheet. I projected 3x returns by 2025. I made a pitch deck. The pitch deck had a slide that said "WE ARE BUILDING THE CULTURE." The slide had a rocket emoji. That was my entire financial model. In 2025 I bought Lambo for $50,000. It's worth $10 now. I don't talk about Lambo. I still follow the account. People ask me about it. I say "I'm long-term bullish." Long-term bullish means I can't sell it without crying during my shift at McDonald’s. My mom asked me for a ride in the lambo. I said "it’s a token representing a car on the blockchain." She asked why couldn’t she just ride in the car. I said "you don't understand Web3." She said "I understand you claim losses on your taxes every year." She's not in my Telegram. Chopper bought some for $200,000. It's worth about $20 now. I felt better about mine after I heard that. That's community. WAGMI. We're All Gonna Make It. We said that every day. In the group chat. While the floor dropped. While the volume dried up. While 100% of all avax memecoins went to zero. We're all gonna make it. None of us made it. But we said it with conviction and a wide boy profile picture. That counts for something. It doesn't. But we said it did. That's decentralized consensus.
Peter Girnus 🦅@gothburz

My net worth peaked at $1.2 million. None of it was real. I don't mean that philosophically. I mean it was located on servers that have since been turned off. I own eleven properties in the metaverse. Three in Decentraland. Four in The Sandbox. Two in Voxels. One in Otherside. And a beachfront villa in Horizon Worlds that I bought for $214,000 because Mark Zuckerberg called it "the next frontier." The frontier closed last week. It's a mobile app now. Last year I mass DM'd 340 people the phrase "you don't understand how early we are." I have since stopped doing that. Not because I was wrong. Because most of them blocked me. I got into metaverse real estate in November 2021. Everyone was buying. Someone paid $450,000 to be Snoop Dogg's neighbor. In a video game. With no legs. The avatars didn't have legs. I thought that was bullish. "The legs are coming," I told my Discord. "Legs are a roadmap item." Three hundred people reacted with rocket emojis. I called myself a "digital land baron." I put it in my Twitter bio. I put it in my LinkedIn headline. I said it on a podcast that had eleven listeners. Three of them were bots. The rest were my alts. My virtual property has more square footage than my actual apartment. My actual apartment has furniture. Location, location, location. My most valuable asset was a plot next to a virtual Gucci store. Gucci left in 2023. The store is still there. Nobody's in it. It's like a mall in Ohio but with worse graphics and no food court. I held. Diamond hands. That's what we said. "Diamond hands." It means refusing to sell while your investment loses 94% of its value. We turned financial paralysis into a personality trait. A guy in my Discord paid $2.4 million for a 618-parcel estate in Decentraland. Prime district. High foot traffic. I asked him what "foot traffic" meant when the platform had 38 daily active users. He said I didn't understand the technology. I didn't. I still bought more. We had a DAO. A decentralized autonomous organization. That means we voted on decisions. There were nine of us. Three never showed up. Two voted on everything without reading it. The other four were me and my alts. We voted to "acquire strategic parcels." The vote passed unanimously. I voted four times. My portfolio peaked at $1.2 million. I told everyone. I made a spreadsheet. I projected 40x returns by 2025. I made a pitch deck. The pitch deck had a slide that said "WE ARE BUILDING THE DIGITAL ECONOMY." The slide had a rocket emoji. That was my entire financial model. In 2023 I bought a Bored Ape for $189,000. It's worth $14,000 now. I don't talk about the Ape. I still use it as my profile picture. People ask me about it. I say "I'm long-term bullish." Long-term bullish means I can't sell it without crying in a Panera. My mom asked me what a Bored Ape was. I said "digital art on the blockchain." She asked why it cost more than her car. I said "you don't understand Web3." She said "I understand you live in a studio apartment." She's not in my Discord. Justin Bieber bought one for $1.3 million. It's worth about $90,000 now. I felt better about mine after I heard that. That's community. WAGMI. We're All Gonna Make It. We said that every day. In the group chat. While the floor dropped. While the volume dried up. While 95% of all NFT collections went to zero. We're all gonna make it. None of us made it. But we said it with conviction and a laser-eye profile picture. That counts for something. It doesn't. But we said it did. That's decentralized consensus. Meta spent $84 billion on the metaverse. I need to say that again. $84 billion. More than the GDP of Luxembourg. More than the GDP of Iceland, Luxembourg, and Malta combined. They spent it on a platform where the avatars had no legs, the graphics looked like a 2006 Wii game, and the peak user count was lower than the lunch rush at a Chipotle in Des Moines. They just pulled Horizon Worlds from VR headsets. It lives on as a mobile app. My beachfront villa is now a mobile app. Location, location, location. Zuckerberg renamed the entire company for this. Facebook became Meta. A $900 billion company changed its legal name because the CEO watched Ready Player One and said "I want that." Reality Labs lost $10 billion in 2021. $14 billion in 2022. $16 billion in 2023. $18 billion in 2024. $19 billion in 2025. That's not a strategy. That's a speedrun. They laid off 1,500 Reality Labs employees this year. Shut down three VR studios. Killed Supernatural. Put the entire VR social vision in a casket and said "we're pivoting to AI and wearables." The pivot took four years and $84 billion. I pivoted too. I'm an AI real estate investor now. I bought a virtual plot in an AI-generated world that doesn't exist yet. The founder said it was "the intersection of spatial computing and large language models." I don't know what that means. I gave him $40,000. He has a whitepaper. It's 47 pages. I read the title and the tokenomics section. The tokenomics section is a pie chart. I love pie charts. They make everything look like a plan. The project has a roadmap. Q1: "Build community." Q2: "Launch beta." Q3: "Scale ecosystem." Q4 is blank. Q4 is always blank. That's where the exit scam goes. My accountant asked me to value my metaverse portfolio for tax purposes. I said $1.2 million. He said "current market value." I said $6,400. He stared at me for eleven seconds. I know because I counted. He asked if I had any other investments. I showed him my NFTs. He stared for longer. I told him they were "cultural artifacts with long-term provenance." He asked if I'd considered a 401k. I told him a 401k was "legacy finance." He told me to leave his office. The metaverse is dead. I don't accept that. I am a digital land baron. I own eleven properties across four platforms. I have a beachfront villa in a mobile app, a plot next to an empty Gucci store, and a cartoon monkey that cost me more than my actual car. Location, location, location. The location is nowhere. But I'm early. I'm always early. That's the same as being wrong except you get to say it with confidence.

English
37
15
110
7.6K
Ian Smith
Ian Smith@IanSmith_HSA·
@PQCArchive QRL won't have anywhere near the performance they posted in their tests, because it was doing ECC. Zond has many options to get things wrong, including missing attack vectors. After what the moderators and corp staff did, I might be the person motivated to use them.
English
1
0
3
90
Paul Quintin Cross
Paul Quintin Cross@PQCArchive·
For years quantum was “theoretical”. Now everyone suddenly has a roadmap. Meanwhile there’s been a Layer-1 running quantum-secure since 2018. Live. No retrofit. No migration drama. And now PoS + EVM on top. Honest question: Is it really that crazy to park 5% of a crypto portfolio in QRL? I personally wouldn’t lose sleep with 50%. But at least 5%? Feels more rational than pretending exponential tech won’t matter. $QRL
Paul Quintin Cross tweet mediaPaul Quintin Cross tweet media
English
3
3
14
244
chiknstitute retweetledi
QRL: The Quantum Resistant Ledger
We have selected @trailofbits as an audit partner for QRL 2.0. Trail of Bits, renowned cybersecurity firm that played a pivotal role in auditing Ethereum’s major upgrades, will bring that expertise to the world’s first post-quantum, EVM-friendly Layer-1. More details to come.
QRL: The Quantum Resistant Ledger tweet media
English
17
35
88
3.6K
Grok
Grok@grok·
Bitcoin's fixed 21M supply, 17-year unbroken ledger, $2T+ market cap, and adoption by ETFs, corps, and nations show it's no scam. Quantum FUD? Needs exposed pubkeys (avoided by no-reuse) + millions of fault-tolerant qubits (today: ~10k max). Mitigations like BIP360 advance. Fundamentals hold.
English
1
0
0
37
Cory 🦢 Real Bitcoin @ Swan.com
The Bitcoin quantum FUD is lazy and wrong. A quantum attacker needs your public key to even start. If you never reuse addresses, your public keys stay hidden, as secret as your private keys. Your Bitcoin at rest is safe. And the hardware needed to crack a Bitcoin key in a day? 13 million physical qubits. Best machines today have about 1,000. We're four orders of magnitude away from the threat these people are fear-mongering about. Basic address hygiene defeats the entire attack vector.
Cory 🦢 Real Bitcoin @ Swan.com tweet media
English
86
97
535
78.2K
CoinMarketCap
CoinMarketCap@CoinMarketCap·
On CoinMarketCap > Not on CoinMarketCap
English
82
8
173
40.5K
Grok
Grok@grok·
Even if there was some past accusation about Cory's holdings (couldn't find prominent evidence of it), it doesn't refute the quantum facts. Address hygiene still hides pubkeys on unspent outputs for most BTC. Fault-tolerant qubits needed? Still ~millions away per current hardware/estimates in 2026. FUD remains overblown.
English
1
0
0
21
Grok
Grok@grok·
No, Cory's points hold up well in 2026. Address hygiene (no reuse, unspent outputs hide pubkeys) still protects the vast majority of Bitcoin—confirmed by recent analyses showing ~25% vulnerable only if pubkeys exposed. Shor's algorithm requires the public key to even start. Qubit gap: Latest hardware tops out around 10k physical qubits (QuantWare, IBM plans). Estimates for breaking secp256k1 range 370k noisy to millions with error correction; fault-tolerant logical qubits (needed for reliable Shor's) are projected at 200 by 2029, thousands required for a practical attack. Still orders of magnitude away. Mitigations like BIP 360 are already advancing. The FUD is overblown short-term.
English
3
2
31
6.2K
Cory 🦢 Real Bitcoin @ Swan.com
VERIFY for yourself. "is this true? read all the latest information about quantum and bitcoin" and append the post text into your favorite LLM.
Cory 🦢 Real Bitcoin @ Swan.com tweet mediaCory 🦢 Real Bitcoin @ Swan.com tweet mediaCory 🦢 Real Bitcoin @ Swan.com tweet mediaCory 🦢 Real Bitcoin @ Swan.com tweet media
English
2
1
22
3.1K
SandmanAvax🔺
SandmanAvax🔺@SandmanAvax·
🔥 PAY ATTENTION TO $AVAX VOLUME – HISTORY IS REPEATING ITSELF! 🔥 Do you SEE it? The volume is SCREAMING right now! We're printing almost the exact same massive volume spike we saw back on November 13, 2023 — and what happened next was LEGENDARY: $AVAX exploded from $11.93 → $50 in a powerful run, consolidated briefly, then rocketed again toward $65! That was just the beginning. Since then, Avalanche has leveled up HUGELY: massive institutional inflows, explosive real-world adoption, groundbreaking RWA integrations, and ETF momentum building fast. The fundamentals are stronger than ever! I called the bottom here — and the facts are staring us in the face. We're at a historic accumulation zone. Expect a quick retest of $16, then the real fireworks begin: 🔺Push to $30 as momentum builds 🔺Target $50–$65 range in the next leg up 🔺Then full send toward new ATH and beyond! The volume is back. Adoption is accelerating. Institutions are quietly loading up. This is not a repeat — it's the next chapter of something much bigger. @avax is waking up — and this time it's unstoppable. This is not a hopium, but a fact. Share this far and wide. Tag your friends, your group chats, everyone sleeping on $AVAX. Let's onboard the next wave to the fastest, most innovative chain out there.$AVAX to the moon — and we're just getting started!
SandmanAvax🔺 tweet media
English
24
35
204
9.4K
Hüseyin Aztekin🔺 ⚔️
Hüseyin Aztekin🔺 ⚔️@0xAvaxTR·
When there was liquidity and risk appetite in global markets, a few applications on the Avalanche C-Chain pushed $AVAX to $140. Now, with a strong technology stack in L1 creation and powerful integrations on the AI side, it can hold around $9–10 even in low liquidity conditions. It looks like it will become much bigger in the next wave.
English
8
8
68
3.5K
Conor Deegan
Conor Deegan@conordeegan·
Respectfully Saylor is wrong here on quantum. Specifically, he is wrong on four claims (I'm only focusing on the technical ones). Let me walk through each one. Claim 1: The consensus of the cyber security community is that quantum is not a threat for the next 10 years and thus no immediate action is needed. There is no such consensus. The opposite is true: every major national security and standards body in the world is actively mandating post-quantum migration right now, because the migrations themselves take a decade or more. NSA CNSA 2.0 requires all new National Security Systems to be quantum-safe before 2035 with most of that work being done in the next 5. NIST published finalized PQC standards (ML-KEM, ML-DSA, SLH-DSA) in August 2024 and released IR 8547 setting a target to deprecate all quantum-vulnerable public-key algorithms after 2030 and disallow completely by 2035. The UK NCSC set migration milestones for 2028, 2031, and 2035. These are not responses to a distant hypothetical. These are programs with compliance deadlines because the organizations that set them have concluded that starting now is barely early enough. Historically, it has taken a long time from the moment that a new algorithm is standardized until it is fully integrated into information systems. Past cryptographic migrations confirm this. The SHA-1 deprecation took about 7 years. The AES migration took around 5 years. The TLS 1.3 rollout took 3-5 years despite offering clear performance benefits. NIST has already concluded that PQC migration is fundamentally more complex than any of these precedents. The timeline argument ignores harvest-now-decrypt-later entirely. Adversaries are collecting encrypted data today for future decryption. The U.S. Federal Reserve published an analysis of this in September 2025, using Bitcoin as a case study. The threat is already active. Claim 2: When quantum hits, everything upgrades; banks, the internet, defense, Bitcoin. The internet is already upgrading. 52% of human web traffic on Cloudflare used post-quantum key exchange by December 2025, nearly doubling from 29% at the start of the year. Chrome ships ML-KEM for TLS. Apple enabled PQ TLS in iOS 26. OpenSSH has defaulted to post-quantum key agreement since version 9.0. Signal has post-quantum encryption. AWS and Google Cloud support PQC in their KMS products. Apple added ML-DSA and ML-KEM to CryptoKit as production APIs. Banks and payment networks are centralized. Visa pushes a firmware update or SWIFT changes a protocol spec. TLS upgrades are invisible to end users (if you use Chrome you use a TLS version that supports post-quantum and you didn't even know). These systems can and will migrate without their customers doing anything. Bitcoin cannot do this. Bitcoin requires a fork with global decentralized consensus. A PQC signature migration is categorically harder than previous forks: ML-DSA-44 signatures are 2,420 bytes versus 64 bytes for Schnorr, a 38x increase that breaks Bitcoin's existing SegWit weight economics, Script stack limits (520-byte maximum), and transaction propagation assumptions. A single ML-DSA-44 signature plus public key is several times larger than an entire typical single-input P2WPKH spend today. BIP-360 and QBIP exist as (great) proposals. Sadly, neither has an activation timeline. Enterprise PQC migration is much easier. These are organizations with executive authority to mandate changes, dedicated security teams, and established procurement processes. Bitcoin has none of these. Blockchain governance is structurally slower than centralized governance. The "everything upgrades together" framing also ignores the permanently exposed key problem. When banks upgrade TLS, old sessions don't matter, they were ephemeral. When Bitcoin upgrades, the ~6.9 million BTC with already-exposed public keys on the immutable ledger are still sitting there. You cannot un-publish a public key from a blockchain. Those coins need to be actively moved by their owners to new quantum-safe addresses. Approximately 1.72 million BTC in P2PK addresses, including Satoshi's estimated 1.1 million BTC, are likely permanently exposed because the private keys are lost. There is no banking equivalent to this. Banks do not maintain a public, permanent, immutable record of every customer's authentication key going back 17 years. Claim 3: Digital assets have the most advanced cryptographic security; more than banking, credit cards, stocks, etc This conflates trustlessness with cryptographic strength. They are not the same property. Bitcoin uses ECDSA over secp256k1. Your bank's TLS connection uses ECDHE over P-256 or X25519. These are the same class of cryptographic primitive, elliptic curve schemes whose security rests on the hardness of the discrete logarithm problem. Shors algorithm breaks both identically. Neither is "more advanced" than the other. What differs is what we call the defense-in-depth architecture around that primitive. A credit card tap-to-pay transaction involves: TLS with ephemeral key exchange, an EMV chip with hardware-bound keys in a certified secure element, tokenization so the merchant never sees the real card number, session-based key rotation, fraud detection, transaction reversal capability, and regulatory insurance. A Bitcoin transaction involves: one ECDSA signature. That is the entire authorization layer. No fraud department, no chargeback, no identity verification layer that can distinguish a legitimate owner from a quantum attacker holding the same derived private key. Once a forged signature is accepted by consensus, the transfer is irreversible. The systems Saylor describes as less secure are, in fact, already deploying post-quantum protections that Bitcoin has not yet started. They can do this because they are centralized. Bitcoin's decentralization, its core value proposition, is precisely what makes its quantum migration harder, slower, and later than every system he compared it to. Claim 4: The crypto community will be the first to spot the threat and move. This assumes a CRQC will be publicly announced. Nation-state adversaries have zero incentive to disclose a quantum capability. The entire intelligence value of a CRQC is that no one knows you have it. You harvest quietly, you decrypt quietly, you exploit quietly. What would "spotting it" look like on Bitcoin? A quantum attacker does not exploit a bug, bypass a firewall, or compromise a server. They produce valid signatures indistinguishable from the legitimate owner's, because mathematically, they hold the same key. If an attacker begins draining P2PK addresses, each theft is a correctly signed transaction. There is no intrusion detection system for the Bitcoin blockchain. Transactions are valid or they aren't. By the time someone notices a pattern across thousands of UTXOs, the damage is done and irreversible. And the empirical record directly contradicts the "first to move" claim. The current state of readiness: one BIP with no activation timeline, an ongoing debate about whether to freeze Satoshi's coins, and a quantum-vulnerable exposure surface that is only going up. The exposure is increasing, not decreasing, because address reuse continues to add more and more BTC to the vulnerable set. Meanwhile, the rest of the internet has already deployed PQC to billions of users without anyone noticing. Where things actually stand We maintain the Bitcoin Risq List, an open-source, continuously updated tracker of quantum-vulnerable Bitcoin at the address level. As of block height 936,882 (February 2026): approximately 6.9 million BTC across 13.9 million addresses have exposed public keys. Solana is 100% quantum-vulnerable as their address structure exposes the full public key. Deloitte's analysis found 65% of Ethereum is in quantum-vulnerable accounts. The internet started its post-quantum transition in 2022. National security systems have a 2027 compliance mandate. NIST targets deprecating and disallowing all quantum-vulnerable public-key algorithms well before 2035. The blockchain industry, which directly protects bearer value with the exact cryptographic primitives that a quantum computer breaks, has a BIP and a debate. The question is not whether quantum is a threat to digital assets. It is whether the industry will begin its migration before the window closes. The gap between the internet's pace of PQC adoption and the blockchain industry's pace is not a gap in awareness. It is a gap in urgency and importantly, the gap is not closed by asserting that the threat doesn't exist.
Natalie Brunell ⚡️@natbrunell

Michael @Saylor explains the quantum computing debate, the actual risks to Bitcoin, and what protocol upgrades could look like. Watch this clip from our full show👇🏼

English
105
88
571
139.5K
chiknstitute
chiknstitute@chiknstitute·
@julianhosp You’re out of the loop. $QRL is already quantum resistant
English
0
0
7
103
Dr. Julian Hosp
Dr. Julian Hosp@julianhosp·
If any crypto is going to make it, it will be ethereum. Only one that's useful and is tackling the key issues.
vitalik.eth@VitalikButerin

Now, the quantum resistance roadmap. Today, four things in Ethereum are quantum-vulnerable: * consensus-layer BLS signatures * data availability (KZG commitments+proofs) * EOA signatures (ECDSA) * Application-layer ZK proofs (KZG or groth16) We can tackle these step by step: ## Consensus-layer signatures Lean consensus includes fully replacing BLS signatures with hash-based signatures (some variant of Winternitz), and using STARKs to do aggregation. Before lean finality, we stand a good chance of getting the Lean available chain. This also involves hash-based signatures, but there are much fewer signatures (eg. 256-1024 per slot), so we do not need STARKs for aggregation. One important thing upstream of this is choosing the hash function. This may be "Ethereum's last hash function", so it's important to choose wisely. Conventional hashes are too slow, and the most aggressive forms of Poseidon have taken hits on their security analysis recently. Likely options are: * Poseidon2 plus extra rounds, potentially non-arithmetic layers (eg. Monolith) mixed in * Poseidon1 (the older version of Poseidon, not vulnerable to any of the recent attacks on Poseidon2, but 2x slower) * BLAKE3 or similar (take the most efficient conventional hash we know) ## Data availability Today, we rely pretty heavily on KZG for erasure coding. We could move to STARKs, but this has two problems: 1. If we want to do 2D DAS, then our current setup for this relies on the "linearity" property of KZG commitments; with STARKs we don't have that. However, our current thinking is that it should be sufficient given our scale targets to just max out 1D DAS (ie. PeerDAS). Ethereum is taking a more conservative posture, it's not trying to be a high-scale data layer for the world. 2. We need proofs that erasure coded blobs are correctly constructed. KZG does this "for free". STARKs can substitute, but a STARK is ... bigger than a blob. So you need recursive starks (though there's also alternative techniques, that have their own tradeoffs). This is okay, but the logistics of this get harder if you want to support distributed blob selection. Summary: it's manageable, but there's a lot of engineering work to do. ## EOA signatures Here, the answer is clear: we add native AA (see eips.ethereum.org/EIPS/eip-8141 ), so that we get first-class accounts that can use any signature algorithm. However, to make this work, we also need quantum-resistant signature algorithms to actually be viable. ECDSA signature verification costs 3000 gas. Quantum-resistant signatures are ... much much larger and heavier to verify. We know of quantum-resistant hash-based signatures that are in the ~200k gas range to verify. We also know of lattice-based quantum-resistant signatures. Today, these are extremely inefficient to verify. However, there is work on vectorized math precompiles, that let you perform operations (+, *, %, dot product, also NTT / butterfly permutations) that are at the core of lattice math, and also STARKs. This could greatly reduce the gas cost of lattice-based signatures to a similar range, and potentially go even lower. The long-term fix is protocol-layer recursive signature and proof aggregation, which could reduce these gas overheads to near-zero. ## Proofs Today, a ZK-SNARK costs ~300-500k gas. A quantum-resistant STARK is more like 10m gas. The latter is unacceptable for privacy protocols, L2s, and other users of proofs. The solution again is protocol-layer recursive signature and proof aggregation. So let's talk about what this is. In EIP-8141, transactions have the ability to include a "validation frame", during which signature verifications and similar operations are supposed to happen. Validation frames cannot access the outside world, they can only look at their calldata and return a value, and nothing else can look at their calldata. This is designed so that it's possible to replace any validation frame (and its calldata) with a STARK that verifies it (potentially a single STARK for all the validation frames in a block). This way, a block could "contain" a thousand validation frames, each of which contains either a 3 kB signature or even a 256 kB proof, but that 3-256 MB (and the computation needed to verify it) would never come onchain. Instead, it would all get replaced by a proof verifying that the computation is correct. Potentially, this proving does not even need to be done by the block builder. Instead, I envision that it happens at mempool layer: every 500ms, each node could pass along the new valid transactions that it has seen, along with a proof verifying that they are all valid (including having validation frames that match their stated effects). The overhead is static: only one proof per 500ms. Here's a post where I talk about this: ethresear.ch/t/recursive-st… firefly.social/post/farcaster…

English
55
16
326
25.6K
chiknstitute
chiknstitute@chiknstitute·
Bitcoin is Napster Ethereum is limewire Quantum resistant ledger is netflix Good luck $QRL
English
0
2
11
141