

Quantus Network
1.1K posts

@QuantusNetwork
Quantus Network is a quantum-secure blockchain for wealth preservation. https://t.co/DfIWoMai9e






.@defijangle hosted a Crypto Payments 101 for first-time Web3 users at @ns and chose @Backpack as the wallet to onboard them 👀 backpack on 🔝🔝🔝






















We've completed a security audit of Rusty Crystals with @Neodyme . Rusty Crystals is our NIST Level 5 quantum secure Dilithium (ML-DSA-87) signature library (with full HD wallet support.) All issues resolved. The audit was led by Ruben Gonzalez, PhD in post-quantum cryptography. Dr. Gonzalez's PhD advisor was Peter Schwabe, co-author of Dilithium. Dilithium is the lattice-based digital signature scheme we've built @QuantusNetwork on.

New paper from our team. Post-quantum HD wallets with full non-hardened public key derivation. Watch-only wallets, xpubs, hierarchical key management, etc. all with provable security under standard lattice assumptions. BIP32 non-hardened derivation depends on the linear algebra of elliptic curves. You add an offset to a parent public key and get a valid child public key. Post-quantum lattice schemes break this in two ways. Some schemes round their public keys during key generation, which destroys linearity. And even without rounding, each derivation adds noise that changes the statistical profile of derived keys, breaking unlinkability. In this work, we built two constructions. The first uses ML-DSA for hardened-only derivation with full security proofs. The second, the main result, uses Raccoon-G, a variant of Raccoon with Gaussian-distributed secrets. We skip the rounding step and publish the full public key to preserve linearity. On top of this, Gaussians are stable under addition, so derived keys stay in the same distributional family as fresh ones. That gives you non-hardened derivation with provable unlinkability and unforgeability under standard lattice assumptions. The tradeoff is larger keys and signatures, and a bounded derivation depth. In practice the depth bound is not restrictive since real wallet structures like BIP44 only use non-hardened derivation for the last two levels anyway. We implemented both constructions in Rust. Paper and Github below.