Harder math under your keys.
Tools for Solana teams measuring post-quantum exposure: a primer that cites its standards, an in-browser Lab that puts classical and post-quantum signatures and key exchange side by side, and a transparent readiness check that scores where you are on the migration path.
Primer
Five short chapters: Shor and Grover, Ed25519 vs ML-DSA, ML-KEM in hybrid mode, how Solana authorises transactions, and crypto-agility. Each cites its standards and says what it does not cover.
Lab
Keygen, sign, verify. Ed25519 next to ML-DSA-44/65/87 and SLH-DSA, and X25519 next to ML-KEM-768, with live size and latency measurements. A Devnet panel signs a real transaction so you can trace what a signature swap would touch.
Readiness check
Fourteen questions across signatures, key management, data-at-rest exposure, protocol agility, and migration planning. Produces a readiness band, per-category scorecard, and an exportable JSON record.
Spec sheet
Byte sizes compound inside the Solana packet budget — current cap: 1,232 B. ML-DSA-44 alone is roughly 2× the full tx limit.
| Scheme | Family | Standard | Pubkey | Signature | vs Ed25519 sig | Fits 1 tx | Status |
|---|---|---|---|---|---|---|---|
| Ed25519 | classical | RFC 8032 | 32 B | 64 B | baseline | yes | ready |
| ML-DSA-44 | lattice | FIPS 204 (Dilithium) | 1,312 B | 2,420 B | 37.8× baseline | 2.0× over | ready |
| ML-DSA-65 | lattice | FIPS 204 (Dilithium) | 1,952 B | 3,309 B | 51.7× baseline | 2.7× over | ready |
| ML-DSA-87 | lattice | FIPS 204 (Dilithium) | 2,592 B | 4,627 B | 72.3× baseline | 3.8× over | ready |
| SLH-DSA-SHA2-128f | hash-based | FIPS 205 (SPHINCS+) | 32 B | 17,088 B | 267.0× baseline | 13.9× over | ready |
| Falcon-512 | lattice | FIPS 206 (draft) | 897 B | 666 B | 10.4× baseline | yes | coming soon |
Sizes are published parameters (FIPS 186-5, FIPS 204, FIPS 205), not measurements. Fit assumes one signer, one public key and a minimal message.
Adversaries can record encrypted material today and decrypt it when capability matures. Long-TTL secrets are already exposed.
There is no consensus timeline for a cryptographically relevant quantum computer. Plan for optionality, not panic.
A single ML-DSA-44 signature is 2,420 B — roughly 2× the entire Solana 1232-byte packet budget.