ml-dsa

The official NEAR public chain stated on X that cryptographic agility is a fundamental requirement of the blockchain industry, and the upgrade of signature schemes should become routine. NEAR accounts now support post-quantum ML-DSA signature schemes without the need to migrate assets.The NEAR core development team, Near One, is advancing NEP-655. This proposal involves commitment-based implicit accounts derived from the initial state hash, with assets located after that hash, without exposing public keys or key hashes on-chain. The related functionality has currently been launched on the testnet, with the mainnet planned for release in the coming weeks.For developers, the team is designing the NEAR Intents wallet contract to support custom signature extensions, including ML-DSA and hash-based schemes. For chains that cannot currently add post-quantum keys, the team is advancing the Q-day recovery registry on NEAR, allowing users to submit recovery keys in a rotatable hash format. NEAR claims that quantum computing factors were considered in its design back in 2018.

On May 14, BNB Chain released the "BSC Post-Quantum Cryptography Migration Report," stating that it has completed the migration testing for quantum-resistant cryptography for transaction signatures and the consensus layer, using the NIST standardized post-quantum signature algorithm ML-DSA-44 (Dilithium) and the pqSTARK aggregation scheme.The report shows that BSC has replaced transaction signatures from ECDSA to ML-DSA-44 and switched consensus voting aggregation from BLS12-381 to pqSTARK to address the potential threats posed by future quantum computing to the existing elliptic curve cryptography system. However, post-quantum signatures also significantly increase the on-chain data volume: the size of a single transaction has increased from about 110 bytes to approximately 2.5KB; the block size in a 2000 TPS scenario has increased from about 130KB to around 2MB; and the TPS in the testing environment has decreased by about 40%-50%.BSC stated that the current network bottleneck mainly comes from the larger transaction data propagation, rather than the consensus protocol itself. Meanwhile, the consensus layer aggregation still maintains high efficiency, with pqSTARK achieving a signature compression ratio of about 43:1, and the additional burden on validators remains within a controllable range. The report concludes that existing technology can achieve "quantum-resistant" deployment for blockchain, but future issues related to network bandwidth and data scalability still need to be addressed.