Post-quantum transactions that require only 96 bytes on-chain: @will_wjk (Imperial College) et al. published a very interesting variant of Shielded CSV, called Compact Shielded CSV. I've always thought the CSV model is attractive in a PQ setting: the blockchain only stores the nullifier, so miners don't have to verify a signature before it gets into a block. Compact Shielded CSV goes a step further: the on-chain nullifier carries no signature at all, only what they call a "degriefer". Pre-quantum that's more than Shielded CSV's 64 bytes, but post-quantum it's much less. Unlike Shielded CSV, which operates on top of Bitcoin, Compact is its own blockchain. That matters for the degriefer: a Compact miner who includes a nullifier with an invalid degriefer can't claim the block reward. Shielded CSV could adopt the degriefer, but on Bitcoin there is no such penalty. Anyone who sees your nullifier before it's confirmed can front-run it with bogus copies for ~100 bytes of fees each, and your spending proof then has to show for every one of them that it's invalid. This is something we deliberately avoided in the design of Shielded CSV. With PQ signatures as large as they are, it probably is a reasonable trade-off. Compact also never discusses reorgs, which are a significant part of the Shielded CSV design. Integrating the degriefer into Shielded CSV would require combining it with the existing reorg handling.

Post-Quantum Cryptography isn't just another security upgrade. 🔒 Organizations that build crypto-agility into their infrastructure now will be better positioned to adopt new cryptographic standards as they evolve. HPE’s Andrew Wheeler explains.

Post-quantum signatures aren't one-size-fits-all, and now developers can find the SHRINCS setup that fits theirs. @blksresearch's explorer lets you tune signature size, signing cost, and verification cost to match your wallet, node, or miner. Their sweep of 25,935 candidates found a fallback signature about 2 KB smaller than NIST's SLH-DSA, and 28% cheaper to verify.

Post-quantum signatures are now available for testing on the TRON Nile Testnet. Following the successful passing of Committee Proposal #20628#, FN_DSA_512 has been enabled on Nile, allowing developers to try one of the supported post-quantum signature algorithms in a testnet environment. Please Note: Nile Testnet proposal status applies only to Nile and does not indicate Mainnet activation. More Details here: 👇

Post-quantum cryptography is becoming an increasingly important area of research across the industry. Our latest report explores what a post-quantum migration path for BSC could look like, including: • ML-DSA-44 transaction signatures • pqSTARK aggregation • Throughput and block propagation trade-offs One important takeaway: The biggest challenge wasn’t consensus. It was the increase in transaction and block sizes once quantum-resistant signatures were introduced. Full report 👇

Post-quantum protection for Bitcoin has arrived. No forks. No consensus changes. No frozen coins. Deployed on @ArchNtwrk 🤝 @CoinDesk with the story ↓

💭 “Post-quantum preparedness is a hot topic with infrastructure providers. To get ready, Lattice announced the Lattice Mach-N2 FPGA family, which combines integrated flash, a root of trust and CNSA 2.0-compliant PQC.” - @FierceSensors 🔗: