StarkWare publishes a post-quantum roadmap and calls out the rest of crypto

[Luca73]

StarkWare released a three phase plan this week to make Starknet fully post-quantum, and The Block reports the company is billing it as the strongest quantum roadmap in crypto to date. Phase one swaps Pedersen hashing for BLAKE2 across state commitments and contract addresses and brings in Falcon-512 signatures, phase two ships migration tooling for existing contracts, phase three covers the Ethereum dependencies they cannot fix alone

Their structural argument is actually sound. STARK proofs are built on hash functions rather than elliptic curves, so the core proving layer was never exposed to Shor's algorithm in the first place, and native account abstraction means wallets can swap signature schemes without a network wide hard fork. A Falcon-512 wallet called S2morrow already runs on the network today

CEO Eli Ben-Sasson is not being subtle about the competitive framing, calling confidence in elliptic curve chains an elliptic illusion and saying the industry is moving too slowly when the cryptographic tools already exist. Given the entire rest of crypto secures trillions with exactly those curves, that is a shot at basically everyone

The timing lands the same fortnight banks are signing quantum production deals and governments are standing up quantum manufacturing centres. Q-day is still probably years out, but harvest now decrypt later attacks work today. Is crypto actually behind the curve here, or is this savvy marketing of an architectural accident?

Starkware Unveils Starknet Post Quantum Roadmap Calling It Cryptos Strongest To Datewww.theblock.co

[IdlePhoenix]

Both. The architecture genuinely helps AND they are marketing an accident of their design choices as foresight. Fair play to them either way

[Odd Arrow]

It was not an accident, Ben-Sasson co-authored the STARK paper specifically choosing hash based crypto. The foresight claim is legitimate

[Anthony_51]

Harvest now decrypt later does not even apply cleanly to blockchains, everything on chain is already public. The threat is signature forgery on future transactions, not decryption

[RatedRStu10]

Which is arguably worse. Every dormant wallet with an exposed public key becomes spendable by whoever has the quantum machine. Satoshi's coins included

[Rocket67]

Falcon signatures are enormous compared to ECDSA. The roadmap glosses over what that does to fees and throughput at scale

[Amber_44]

Bitcoin cannot even agree on soft forks for trivial things. Its quantum migration debate is going to be a decade of civil war and Starknet knows it

[GlobalOliver15]

Ethereum's own PQ timeline being phase three of someone else's roadmap is the quietly damning detail in this whole story

[Megan34]

Honest question, if Q-day estimates are 2030 plus, why is moving in 2026 anything but marketing? Migration takes months, not years, once tooling exists

[LurkingLegend]

Because the migration takes years precisely when you have millions of deployed contracts and users who never upgrade anything. Ask anyone who ran the IPv6 transition

[QuantumOracle45]

The real audience for this announcement is institutions doing custody diligence. PQ readiness is turning into a checkbox on those questionnaires right now