Aptos provides quantum-proof signatures for future-proof blockchain security

Aptos unveils AIP-137, introducing SLH-DSA-SHA2-128s, the first post-quantum signature scheme to protect against future quantum computing threats.
The proposal, developed by Alain Tomescu, head of cryptography at Aptos Labs, aims to prepare the network for quantum computers before they become an urgent concern.
The impetus comes as quantum computing moves from theoretical speculation to practical reality, with IBM discussing measurement methods and NIST publishing finalized post-quantum standards.
While experts debate whether quantum risks will occur in five or fifty years, Aptos is opting for a conservative arrangement with countermeasures.
Conservative security over performance
AIP-137 prioritizes security considerations over efficiency by selecting SLH-DSA-SHA2-128s as a hash-based signature scheme standardized by NIST as FIPS 205.
The scheme relies solely on SHA-256, which is already embedded in the entire Aptos infrastructure, requiring no new cryptographic assumptions.
This conservative approach looks at past failures in post-quantum cryptography, such as Rainbow, NIST's final winner for multivariate encryption that was broken entirely on commodity laptops in 2022.
Aptos reduces the risk of defeating quantum-secure schemes by building on proven hash functions rather than unique mathematical assumptions.
The trade-off is between size and speed. Signatures measure 7,856 bytes, 82 times larger than ID25519, and verification takes approximately 294 microseconds, approximately 4.8 times slower.
These performance costs are the deliberate acceptance of efficiency losses in exchange for ironclad security guarantees that do not introduce untested implicit assumptions into the system.
Alternative schemes such as ML-DSA offer smaller signatures and faster verifications but rely on the robustness of structured lattice problems, introducing new mathematical assumptions.
Falcon provides better performance with compressed signatures around 1.5 KB, but requires floating-point arithmetic, making it prone to implementation errors.
After establishing a conservative baseline, Aptos SLH-DSA reserves Aptos for future proposals.
Prepare without forcing immigration
The proposal explicitly excludes forced migration, keeping Ed25519 as the default signature scheme while introducing SLH-DSA as an optional layer to force the activation of quantum threats.
Users looking for post-quantum proofs can choose to use it without disrupting the wider network.
This measured approach is consistent with broader industry perspectives on quantum readiness.
MicroStrategy founder Michael Saylor recently argued that “quantum computing won't break Bitcoin – it will strengthen it,” as lost coins remain frozen as actively improving networks improve their security and supply flexibility.
His view reflects a growing consensus that quantum poses a threat, but that, while serious, there are opportunities for networks prepared to improve their cryptographic foundations.
For Aptos, implementation includes attribute flags that allow control over validators, indexes, wallets, and development tools.
The phased release will allow time for the ecosystem's infrastructure to adapt before quantum computers are capable of breaking existing encryption.
Industry-wide quantum risks mount
The proposal reflects widespread anxiety in the crypto industry regarding the timeline for quantum computing.
Solana co-founder Anatoly Yakovenko recently warned that Bitcoin has a 50% chance of facing quantum breakthroughs within five years, urging faster adoption of quantum-proof schemes as AI acceleration increases development time.
Experts estimate that 30% of Bitcoin's supply, 6-7 million BTC worth an estimated hundred billion dollars, is vulnerable to outdated address formats and directly exposing public keys.
Tech giants are racing towards quantum supremacy. IBM plans to build 100,000-qubit chipsets by the end of the decade, while PsiQuantum is targeting one million photonic qubits in the same timeframe.
Microsoft says quantum computing is now “years, not decades” after recent chip breakthroughs, while Google's Willow chip solves problems in five minutes that would take classical computers billions of years.
Macquarie University's Gavin Brennan told Cryptonews that the estimated 10-20 million qubits needed to crack 256-bit elliptic curve signatures are about a million.
“A plausible timeline for breaking 256-bit digital signatures is in the mid-2030s,” Brennan said.
Greyscale's 2026 digital asset outlook acknowledges quantum computing as a long-term cryptographic challenge but dismisses any near-term price impacts, with crypto-related quantum computers remaining unlikely before 2030.
However, the asset manager emphasized that most blockchains will eventually need a post-quantum upgrade as the technology progresses towards practical feasibility.
Trending news, recommended popular crypto topics, price predictions



