Quantum-Secure Cryptography for Blockchain in 2026

Cryptography

2026-05-22

NIST finalized FIPS 203/204/205 in August 2024. Audit and implement ML-KEM and ML-DSA to secure blockchain and crypto exchanges against quantum threats.

Frequently Asked Questions

Quantum-secure cryptography, also called post-quantum cryptography (PQC), refers to cryptographic algorithms designed to remain secure against both classical computers and cryptographically relevant quantum computers (CRQCs). NIST finalized three standards in August 2024: FIPS 203 (ML-KEM for key encapsulation), FIPS 204 (ML-DSA for digital signatures), and FIPS 205 (SLH-DSA for stateless hash-based signatures). These replace RSA and ECDSA, which Shor's algorithm can break on a sufficiently powerful quantum computer.

Ethereum and Bitcoin use ECDSA over the secp256k1 curve. Google's March 2026 research estimates that breaking 256-bit elliptic curve cryptography requires approximately 1,200 logical qubits, roughly 20 times fewer than earlier estimates. Addresses with exposed public keys (reused or spent addresses) face the highest near-term risk because an attacker with extended compute time can derive private keys from the on-chain public key. Harvest-now-decrypt-later attacks compound this: adversaries collect encrypted transaction data today for future decryption when quantum hardware matures.

The NSA's CNSA 2.0 framework requires newly deployed national security systems to use quantum-safe algorithms from January 1, 2027. All existing NSS equipment unable to support CNSA 2.0 must be phased out by December 31, 2030, with mandatory exclusive use of CNSA 2.0 algorithms (ML-KEM-1024, ML-DSA-87, AES-256) by December 31, 2031. Full migration of all NSS systems is required by 2035 per NSM-10. The European Union's DORA framework independently mandates resilience testing of cryptographic infrastructure for financial entities.