Technologies

Safe against quantum computers. From day one.

Quantum computers will break the signatures most blockchains rely on today. Tenrai was built on the new NIST standards from the start: every key and every signature is post-quantum, and so are the connections between nodes, wallets and pools.

Category 3

The blockchain

Every signature on chain uses ML-DSA-65 at NIST security category 3.

Category 1

The Messenger

Every chat opens with ML-KEM-512 at NIST security category 1.

FIPS 203–205

NIST standards

Built on the post-quantum standards NIST published in 2024.

0

Classical signatures

No elliptic curves to fall back to, so there is nothing to downgrade.

Why it matters

A blockchain is only as safe as its signatures. Most chains sign with elliptic curves, such as ECDSA or Ed25519. A large quantum computer running Shor's algorithm could work out a private key from its public key, and then move coins that are not its own. Tenrai never had that weakness: its keys rest on lattice problems, for which no quantum shortcut is known.

MOST BLOCKCHAINS Elliptic-curve key ECDSA or Ed25519 Quantum computer runs Shor's algorithm Private key exposed coins can be taken TENRAI ML-DSA-65 key lattice-based, FIPS 204 Quantum computer finds no shortcut Key stays secret your coins stay yours

Google sees the danger the same way. On March 25, 2026, it set its timeline for moving to post-quantum cryptography to 2029 and asked other engineering teams to follow. That is little more than two years away. Six days later, Google Quantum AI showed that the elliptic curve keys of Bitcoin and similar cryptocurrencies fall to far fewer qubits than previously thought: fewer than half a million physical qubits, and a first such machine could find a private key in about nine minutes once its public key appears, faster than Bitcoin's ten-minute block. Its call to every vulnerable cryptocurrency: begin the move to post-quantum cryptography now.

Sources:Google: Quantum frontiers may be closer than they appearGoogle Research: Safeguarding cryptocurrency

Measured by NIST

NIST rates post-quantum schemes in five security categories. Each one says how hard a scheme is to break, even for an attacker with a quantum computer, measured against a brute-force attack on a well-known cipher or hash. Tenrai's blockchain sits at category 3, as hard to break as an AES-192 key. The Messenger sits at category 1, as hard as an AES-128 key. Both are quantum-safe.

NIST SECURITY CATEGORY · AT LEAST AS HARD TO BREAK AS Category 1 AES-128 key search Category 2 SHA-256 collision Category 3 AES-192 key search Category 4 SHA-384 collision Category 5 AES-256 key search Messenger ML-KEM-512 Blockchain ML-DSA-65

Why category 3?

A higher category does not mean more security in practice. By today's knowledge, category 1 is already fully quantum-safe and enough: it matches the strength of an AES-128 key, which is considered safe against quantum computers as well. Higher categories only add margin in case attacks improve one day.

We still chose category 3 for the blockchain, one step more, to be on the safe side and because it hardly limits scaling. For a high-performance blockchain, speed and bandwidth matter as much as strength: every signature travels through the network and into the blocks.

Category 5 is no option. ML-DSA-87 needs 37 % more data for every signed input and makes each signature 40 % larger, without more protection against any real attack.

BYTES PER SIGNED INPUT · PUBLIC KEY AND SIGNATURE ML-DSA-44 Category 2 3,732 bytes ML-DSA-65 Category 3 · Tenrai 5,261 bytes ML-DSA-87 Category 5 7,219 bytes Public key Signature
Public key and signature that every signed input carries, by FIPS 204 parameter set. Category 5 would add 37 % to each of them.

Where it protects you

Your coins

Every payment is signed with ML-DSA-65, and every coin is locked to a SHAKE256 hash of its owner's public key.

Final blocks

Validators vote on every cut with ML-DSA-65. A cut certificate is a set of post-quantum signatures, so finality stays final.

Staking

Stake operations, validator keys and heartbeats are all signed with ML-DSA-65.

Network and API

Nodes, wallets and pools connect over TLS 1.3 with the hybrid X25519MLKEM768 key exchange, so traffic recorded today stays private later. Every answer of the Tenrai API is signed with ML-DSA-65.

Messenger

Each chat opens with an ML-KEM-512 key exchange, and every message is sealed with XChaCha20-Poly1305.

Wallet file and releases

Your wallet file is sealed with Argon2id and XChaCha20-Poly1305. Every release is signed twice, with ML-DSA-65 and the hash-based SLH-DSA.

Built in, not bolted on

Hashes with headroom

Every identifier is a 384-bit SHA-384 digest, and coin locks and the TenQ proof of work use SHAKE256. Quantum computers only speed up brute-force search by a square root, and 384 bits keep a comfortable margin.

One signature, one purpose

Every signature names what it is for. A proof that you own an address can never move your coins, and a validator's vote can never be replayed as a payment.

Privacy and messages, quantum-safe too

The same standards protect TSP-2 stealth payments and every Trai Messenger chat.