Post-quantum key forge for Solana

Built for the day after Q-day.1

Your Solana address is your public key. A big enough quantum computer turns it back into your private key. Scan a wallet to see how long its key has been in the open, then forge a post-quantum key for it, right here in your browser.

Read-only. No wallet connection, no seed phrase.

1 Q-day: the first day a quantum computer can break the signatures that protect Solana wallets today.

Curve25519
p = 2255 − 19
public key
32 bytes
Fig. 1 Your Ed25519 key between crossed polarizers. Strain shows up as colour.
04008001200 nm
strain
0.000
defects
0
nodes
0
lattice — tty local
Solana slot … Forge engine loading Bytes sent while forging 0

Result

Your seal

A seal is a short statement, signed by your new lattice key, that binds it to your wallet. Scan a wallet or forge a key and your card appears here.

Specimen. This card shows sample data until you scan or forge.

Share

X can’t attach images from a link. Copy the image, then paste it into your post.

Keep

The seal file is public; anyone can verify it. The keyfile holds your lattice secret key. It never leaves this page unless you download it.

Co-sign

Have your current wallet sign the same pledge. Both signatures together prove the old key and the new one belong to the same person, something nobody can prove after Q-day.

Message signature only. Never a transaction.

§1

Your address is your public key.

  1. 1.1

    A Solana address is 32 bytes written in base58. On Bitcoin, an unused address hides your key behind a hash. On Solana there is no hash. The address is the key.

  2. 1.2

    That key is a point A on Curve25519: a fixed point B, multiplied by your secret number a. Multiplying forward takes microseconds. Walking back from A to a takes a classical computer about 2128 steps.

  3. 1.3

    Shor’s algorithm walks it back. Google Quantum AI’s 2026 estimate for a 256-bit curve: under 1,200 logical qubits, under half a million physical qubits, minutes of runtime.Babbush et al., 2026

  4. 1.4

    Lattices have no such shortcut. ML-DSA and Falcon hide the secret as a short vector in a lattice of more than a thousand dimensions, and no known quantum algorithm finds it efficiently. That is the key LATTICE forges.

§2

Scan, forge, seal.

The scan reads public chain data. Forging and sealing run in a Web Worker on your device, with open-source code you can read, and send nothing anywhere. Press Run to execute each step right here.

  1. 2.1

    Scan

    LATTICE checks that your address is a real point on Curve25519, then reads its balance, its tokens and how far back its signatures go.

    const bytes = base58.decode(address);
// a wallet address is a point on the curve
const A = ed25519.Point.fromBytes(bytes);
  2. 2.2

    Forge

    A fresh key pair from 32 bytes of browser randomness. ML-DSA-65 takes a few milliseconds. Falcon-512 takes a few hundred.

    import { ml_dsa65 }
  from '@noble/post-quantum/ml-dsa.js';
const { publicKey, secretKey } =
  ml_dsa65.keygen(randomBytes(32));
  3. 2.3

    Seal

    The new key signs a pledge naming your wallet and its own fingerprint. LATTICE verifies the signature before showing you the card.

    const sig = ml_dsa65.sign(
  pledge, secretKey);
ml_dsa65.verify(sig, pledge, publicKey);
// → true

§3

Security takes space.

A post-quantum public key is bigger, because its security lives in structure rather than in a single point. Each column below holds 32 bytes, one Ed25519 key.

Ed25519 32 bytes, 1 column

ML-DSA-65 1,952 bytes, 61 columns

Ed25519ML-DSA-65
Public key32 B1,952 B
Signature64 B3,309 B
Secret key32 B4,032 B
Survives ShorNoYes
NIST security category—3

§4

The vault opens when Solana speaks post-quantum.

Every Solana wallet is secured by an Ed25519 signature today. In April 2026 its two main validator clients, Anza and Firedancer, each built Falcon into test code for the day that changes. The LATTICE vault is built for that day: a program that releases funds only to a lattice signature. It is in testing, and deposits are closed.

Chamber 01

Deposits closed

Fig. 4 Your key as it is today. It can enter the vault once it is sealed.

Vault program
In testing
Accepts
ML-DSA-65, Falcon-512
Deposits
Closed
Opens
When Solana verifies lattice signatures
Your key
Not forged
Your walletEd25519
co-signs
Lattice keyML-DSA-65
unlocks
Vault programin testing

Runs today

  • ML-DSA and Falcon key generation in your browser
  • Signing and verifying your pledge
  • Ed25519 co-signature check against your wallet
  • Exposure data read live from Solana

Not live yet

  • The on-chain vault program
  • Moving tokens into the vault
  • Lattice signature checks on Solana itself

§5

Don’t trust a seal. Verify it.

Drop or paste any seal file. LATTICE recomputes the fingerprint, checks the lattice signature and, if the wallet co-signed, the Ed25519 signature too. All on your device.

Drop a .json seal file or paste it
  1. Waiting for a seal.

§6

The road to Q-day.

Nobody knows the date. Here is how close the parts already are.

  1. Peter Shor publishes a quantum algorithm for factoring and discrete logarithms, the problems behind RSA and elliptic curves.

  2. Solana’s mainnet beta goes live. Every wallet address is an Ed25519 public key.

  3. NIST publishes FIPS 203, 204 and 205. ML-DSA becomes the standard post-quantum signature.

  4. NIST’s draft transition plan: quantum-vulnerable signatures such as ECDSA deprecated after 2030, disallowed after 2035.

  5. Google’s Willow chip shows error rates falling as its qubit grid grows, a key threshold for error correction.

  6. The Solana Winternitz Vault ships: an opt-in, hash-based vault for quantum-resistant storage.

  7. Project Eleven and the Solana Foundation run a Solana testnet with post-quantum signatures.

  8. Google Quantum AI: a 256-bit elliptic curve could fall to under 1,200 logical qubits, in minutes.

  9. Anza and Firedancer each implement Falcon signatures for Solana, ready if the threat becomes credible.

  10. LATTICE: forge a post-quantum key for your Solana wallet, in your browser.

  11. Not on any calendar yet. Your key can be ready before it is.

§7

$LATTICE

The forge is free for everyone. The token adds weight to your seal.

Level 5 seals

Hold $LATTICE and co-sign. Your key is reforged at NIST’s highest security category, ML-DSA-87 or Falcon-1024, and your card says so.

First in line

When the vault opens, co-signed holder seals get the first places in the queue.

Vault fund

Creator fees go to a public wallet that funds the vault program. Its balance is read live from Solana.

Contract address Posted on X at launch Buy $LATTICE