2 revenue streams, 4 stakeholders.
QMS is a decentralized marketplace for compute: the chain matches demand for optimization work with a global pool of solvers.
Original Tweet
X | LinkedIn | Medium | Docs
QMS is a decentralized marketplace for compute: the chain matches demand for optimization work with a global pool of solvers.
Original Tweet
X | LinkedIn | Medium | Docs
❤5🔥2
QMS is both a quantum-resistant blockchain and a marketplace for quantum computing, with native settlement built in.
Quantum-resistant today, quantum-productive tomorrow.
Original Tweet
X | LinkedIn | Medium | Docs
Quantum-resistant today, quantum-productive tomorrow.
Original Tweet
X | LinkedIn | Medium | Docs
🔥4❤2👍2
Miners, developers, clients, and investors are already paying attention.
Over 5,100 people have joined the QMS waitlist. Thank you to everyone who got in early.
If you haven’t yet, sign up here and help spread the word: https://qms.finance/#waitlist
Original Tweet
X | LinkedIn | Medium | Docs
Over 5,100 people have joined the QMS waitlist. Thank you to everyone who got in early.
If you haven’t yet, sign up here and help spread the word: https://qms.finance/#waitlist
Original Tweet
X | LinkedIn | Medium | Docs
❤3👍3
We’ve seen a lot of questions about when QMS will open Discord.
For now, the team is focused on building toward testnet.
The best way to stay close:
✔︎ Follow our X
✔︎ Join our Telegram
✔︎ Sign up for the waitlist
Original Tweet
X | LinkedIn | Medium | Docs
For now, the team is focused on building toward testnet.
The best way to stay close:
✔︎ Follow our X
✔︎ Join our Telegram
✔︎ Sign up for the waitlist
Original Tweet
X | LinkedIn | Medium | Docs
❤6
Companies spend billions on computation.
QMS starts with workloads that are suited to decentralized competition:
• backed by real-world demand
• solvable by independent participants
• objectively and efficiently verifiable
The goal is an economic flywheel where demand for useful computation strengthens miner incentives and contributes to network security.
Original Tweet
X | LinkedIn | Medium | Docs
QMS starts with workloads that are suited to decentralized competition:
• backed by real-world demand
• solvable by independent participants
• objectively and efficiently verifiable
The goal is an economic flywheel where demand for useful computation strengthens miner incentives and contributes to network security.
Original Tweet
X | LinkedIn | Medium | Docs
❤3
QUBO maps naturally to quantum hardware: quantum annealers and QAOA (the Quantum Approximate Optimization Algorithm) both search for low-energy solutions to the same optimization problems QMS clients submit.
That gives quantum miners two paths into QMS:
Hybrid, available at launch: quantum hardware finds a strong starting point, then a classical seeded search performs the replayable, verifiable work. No protocol change. Every valid miner remains eligible for the block reward lottery, while solutions meeting the client's criteria earn client payments. Quantum miners that meet those criteria more often earn more.
Native, longer term: a quantum machine runs the full search. Because quantum solvers return samples rather than a replayable path, proving the work was not pre-computed requires a different mechanism. We're developing this with academic partners.
Original Tweet
X | LinkedIn | Medium | Docs
That gives quantum miners two paths into QMS:
Hybrid, available at launch: quantum hardware finds a strong starting point, then a classical seeded search performs the replayable, verifiable work. No protocol change. Every valid miner remains eligible for the block reward lottery, while solutions meeting the client's criteria earn client payments. Quantum miners that meet those criteria more often earn more.
Native, longer term: a quantum machine runs the full search. Because quantum solvers return samples rather than a replayable path, proving the work was not pre-computed requires a different mechanism. We're developing this with academic partners.
Original Tweet
X | LinkedIn | Medium | Docs
❤3
Hashing gave PoW something incredibly valuable: cheap verification.
PoUW asks a much harder question: can useful computation be just as easy to verify?
If the answer is yes, network security no longer has to be funded by block rewards alone.
It can also be reinforced by real demand for computation.
Original Tweet
X | LinkedIn | Medium | Docs
PoUW asks a much harder question: can useful computation be just as easy to verify?
If the answer is yes, network security no longer has to be funded by block rewards alone.
It can also be reinforced by real demand for computation.
Original Tweet
X | LinkedIn | Medium | Docs
👍3❤2
This media is not supported in your browser
VIEW IN TELEGRAM
This week’s theme is convergence.
Hardware development and protocol migration now operate on the same timeline. Building the machine and preparing for the machine have become parallel engineering efforts.
2 signals stood out:
1️⃣ A $300 million bet on running Shor at cryptographic scale with 10,000 qubits.
Oratomic closed a $300M Series A. The Caltech-linked startup was founded by the researchers behind March’s paper showing that Shor’s algorithm could run at cryptographically relevant scales with as few as 10,000 reconfigurable atomic qubits.
The team has already trapped arrays of more than 6,000 neutral atoms. Running fault-tolerant computation at that scale remains the key challenge to prove, and Oratomic is targeting a working utility-scale machine by the end of the decade. The round converts a resource estimate on paper into a well-funded engineering program.
2️⃣ Ethereum put quantum migration on its engineering roadmap.
On July 6, Vitalik Buterin published The Extremely Lean Chain, a research proposal for redesigning Ethereum’s consensus layer. It builds on the broader Lean Ethereum roadmap, which plans post-quantum cryptography upgrades across the consensus, execution, and data layers, with core L1 post-quantum infrastructure targeted around 2029.
Ethereum has shifted quantum resistance from a research topic to a multi-year engineering effort. Retrofitting new cryptography into a live protocol carrying hundreds of billions of dollars in value requires coordinated upgrades across validators, wallets, clients, and infrastructure. That is exactly why the work starts years before quantum computers arrive.
Original Tweet
X | LinkedIn | Medium | Docs
Hardware development and protocol migration now operate on the same timeline. Building the machine and preparing for the machine have become parallel engineering efforts.
2 signals stood out:
1️⃣ A $300 million bet on running Shor at cryptographic scale with 10,000 qubits.
Oratomic closed a $300M Series A. The Caltech-linked startup was founded by the researchers behind March’s paper showing that Shor’s algorithm could run at cryptographically relevant scales with as few as 10,000 reconfigurable atomic qubits.
The team has already trapped arrays of more than 6,000 neutral atoms. Running fault-tolerant computation at that scale remains the key challenge to prove, and Oratomic is targeting a working utility-scale machine by the end of the decade. The round converts a resource estimate on paper into a well-funded engineering program.
2️⃣ Ethereum put quantum migration on its engineering roadmap.
On July 6, Vitalik Buterin published The Extremely Lean Chain, a research proposal for redesigning Ethereum’s consensus layer. It builds on the broader Lean Ethereum roadmap, which plans post-quantum cryptography upgrades across the consensus, execution, and data layers, with core L1 post-quantum infrastructure targeted around 2029.
Ethereum has shifted quantum resistance from a research topic to a multi-year engineering effort. Retrofitting new cryptography into a live protocol carrying hundreds of billions of dollars in value requires coordinated upgrades across validators, wallets, clients, and infrastructure. That is exactly why the work starts years before quantum computers arrive.
Original Tweet
X | LinkedIn | Medium | Docs
❤2
The hardest part of PoUW is making real-world optimization compatible with consensus.
Bitcoin solves this with hashes that are cheap to verify.
QMS replaces arbitrary hashing with commercially valuable optimization problems while keeping computational work at the heart of consensus.
Original Tweet
X | LinkedIn | Medium | Docs
Bitcoin solves this with hashes that are cheap to verify.
QMS replaces arbitrary hashing with commercially valuable optimization problems while keeping computational work at the heart of consensus.
Original Tweet
X | LinkedIn | Medium | Docs
❤2
We received some really good questions from you, and here’s our CTO Christopher Portmann’s reply, ICYMI:
1️⃣ Q: I haven't quite figured out yet whether the testnet network prioritizes GPU or CPU?
Chris: The first version will be CPUs. Once we can better gauge demand and the computational power needed to meet it, we can optimise the code for GPUs.
Note that our first version will also allow for hybrid quantum-classical miners, where part of the computation is done on a QPU. Admittedly, at the moment these still cost more and produce less, but the design is ready for the next frontier in computing.
2️⃣ Q: As quantum solvers join the network, what’s your current thinking on proof-of-work verification for quantum outputs since they don’t produce a replayable classical path? Are you exploring ZK-based approaches here?
Chris: That’s a brilliant question. The short answer is no, we are exploring the use of hash-based (ZK-)SNARKs for improving verification in the classical case. But for the quantum case, something else is needed.
ZK-proofs are often designed to be short and efficient to verify, so they can be used to shift the burden from the verifiers to the prover (that is what zk-rollups do). They also provide the ZK-property, which in the context of computation verification, could allow a miner to prove that they have done the correct computation without revealing what computation that is (e.g., to preserve confidentiality of the client’s data). So they can be used to improve proofs, but they can’t be used to come up with proofs in a setting where we don’t already know how to generate (large, non-zk) proofs.
In the quantum case, we can verify that the output is correct, but what we don’t yet know how to do, is for a quantum miner to prove that they haven’t pre-computed the output (e.g., they learned about the input before other miners, and get an advantage which doesn’t correspond to their computational power). Classical replayable paths solve the problem, because in the classical case the miners are forced to follow a path that depends on the hash of the last block, so we just need to verify that they did take that path. We are working with academic partners on solving the quantum case.
3️⃣ Q: Will QMS network allow users to migrate from current wallet addresses to quantum-safe ones?
Chris: As soon as Ethereum pushes the account abstraction feature that we need, we will be able to implement this.
Since Ethereum’s roadmap for a post-quantum (PQ) consensus will take years, we are implementing PQ-consensus ourselves. But the account abstraction features needed to migrate current addresses to quantum safe ones should be released with the Ethereum Hegotá update at the end of the year (hopefully). And since we do not want to reinvent the wheel, we will wait for that and base our PQ-addresses on it.
Original Tweet
X | LinkedIn | Medium | Docs
1️⃣ Q: I haven't quite figured out yet whether the testnet network prioritizes GPU or CPU?
Chris: The first version will be CPUs. Once we can better gauge demand and the computational power needed to meet it, we can optimise the code for GPUs.
Note that our first version will also allow for hybrid quantum-classical miners, where part of the computation is done on a QPU. Admittedly, at the moment these still cost more and produce less, but the design is ready for the next frontier in computing.
2️⃣ Q: As quantum solvers join the network, what’s your current thinking on proof-of-work verification for quantum outputs since they don’t produce a replayable classical path? Are you exploring ZK-based approaches here?
Chris: That’s a brilliant question. The short answer is no, we are exploring the use of hash-based (ZK-)SNARKs for improving verification in the classical case. But for the quantum case, something else is needed.
ZK-proofs are often designed to be short and efficient to verify, so they can be used to shift the burden from the verifiers to the prover (that is what zk-rollups do). They also provide the ZK-property, which in the context of computation verification, could allow a miner to prove that they have done the correct computation without revealing what computation that is (e.g., to preserve confidentiality of the client’s data). So they can be used to improve proofs, but they can’t be used to come up with proofs in a setting where we don’t already know how to generate (large, non-zk) proofs.
In the quantum case, we can verify that the output is correct, but what we don’t yet know how to do, is for a quantum miner to prove that they haven’t pre-computed the output (e.g., they learned about the input before other miners, and get an advantage which doesn’t correspond to their computational power). Classical replayable paths solve the problem, because in the classical case the miners are forced to follow a path that depends on the hash of the last block, so we just need to verify that they did take that path. We are working with academic partners on solving the quantum case.
3️⃣ Q: Will QMS network allow users to migrate from current wallet addresses to quantum-safe ones?
Chris: As soon as Ethereum pushes the account abstraction feature that we need, we will be able to implement this.
Since Ethereum’s roadmap for a post-quantum (PQ) consensus will take years, we are implementing PQ-consensus ourselves. But the account abstraction features needed to migrate current addresses to quantum safe ones should be released with the Ethereum Hegotá update at the end of the year (hopefully). And since we do not want to reinvent the wheel, we will wait for that and base our PQ-addresses on it.
Original Tweet
X | LinkedIn | Medium | Docs
❤4👍2
As always, share your technical questions with us, and we’ll provide thoughtful and truthful replies.
X: https://x.com/QMSNetwork
Website: https://qms.finance
LinkedIn: https://linkedin.com/company/qms-network
Medium: https://medium.com/@QMSNetwork
X: https://x.com/QMSNetwork
Website: https://qms.finance
LinkedIn: https://linkedin.com/company/qms-network
Medium: https://medium.com/@QMSNetwork
👍3❤2
"What if mining had two “customers” instead of one?
Today, miners are paid by the network. QMS adds another source of demand: commercial optimization problems.
The same computation helps secure the chain while producing something businesses already pay for.
One computation. Two revenue streams.
Original Tweet
X | LinkedIn | Medium | Docs
Today, miners are paid by the network. QMS adds another source of demand: commercial optimization problems.
The same computation helps secure the chain while producing something businesses already pay for.
One computation. Two revenue streams.
Original Tweet
X | LinkedIn | Medium | Docs
❤5
Most blockchains fund their security from inside the network.
QMS explores a different model.
Commercial demand → stronger miner incentives → a stronger network → more commercial demand.
That’s the flywheel QMS is designed to build.
Original Tweet
X | LinkedIn | Medium | Docs
QMS explores a different model.
Commercial demand → stronger miner incentives → a stronger network → more commercial demand.
That’s the flywheel QMS is designed to build.
Original Tweet
X | LinkedIn | Medium | Docs
❤4
Traditional mining:
spend energy → secure the network → earn block rewards.
QMS mining:
spend energy → secure the network while solving a commercial optimization problem → earn block rewards + client payments.
Original Tweet
X | LinkedIn | Medium | Docs
spend energy → secure the network → earn block rewards.
QMS mining:
spend energy → secure the network while solving a commercial optimization problem → earn block rewards + client payments.
Original Tweet
X | LinkedIn | Medium | Docs
❤3👍3
Many people don’t realize this, banks are further along in post-quantum migration than much of crypto.
Regulators have already pushed financial institutions into multi-year transition plans.
Crypto has a different challenge:
- Wallets
- Exchanges
- Custodians
- Bridges
- Smart contracts
- Users
That’s why post-quantum readiness is easier to design in than retrofit.
Original Tweet
X | LinkedIn | Medium | Docs
Regulators have already pushed financial institutions into multi-year transition plans.
Crypto has a different challenge:
- Wallets
- Exchanges
- Custodians
- Bridges
- Smart contracts
- Users
That’s why post-quantum readiness is easier to design in than retrofit.
Original Tweet
X | LinkedIn | Medium | Docs
❤5
The best CTOs in deep tech can move fluently between theory and production.
Meet Christopher Portmann, CTO of QMS Network.
Christopher brings more than 20 years of experience across advanced cryptography, decentralized systems, and blockchain protocol design.
After 15 years in academia, a Ph.D. in quantum cryptography, and more than a dozen peer-reviewed publications, he joined Concordium, where he led the design of core blockchain protocols, including novel consensus mechanisms and zero-knowledge-based identity systems.
Working closely with engineering teams, he helped carry those designs from formal security proofs through to production.
At QMS, Christopher leads the protocol’s overall architecture and engineering execution. His work spans cryptographic research, protocol design, the post-quantum transition, and QMS’s long-term research programme on quantum hardware integration.
Few people combine that level of research depth, protocol design, and production experience. For a blockchain preparing for the quantum era, that range matters.
QMS was built around an ambitious technical vision. We’re proud to have Christopher leading the team bringing it to life!
Original Tweet
X | LinkedIn | Medium | Docs
Meet Christopher Portmann, CTO of QMS Network.
Christopher brings more than 20 years of experience across advanced cryptography, decentralized systems, and blockchain protocol design.
After 15 years in academia, a Ph.D. in quantum cryptography, and more than a dozen peer-reviewed publications, he joined Concordium, where he led the design of core blockchain protocols, including novel consensus mechanisms and zero-knowledge-based identity systems.
Working closely with engineering teams, he helped carry those designs from formal security proofs through to production.
At QMS, Christopher leads the protocol’s overall architecture and engineering execution. His work spans cryptographic research, protocol design, the post-quantum transition, and QMS’s long-term research programme on quantum hardware integration.
Few people combine that level of research depth, protocol design, and production experience. For a blockchain preparing for the quantum era, that range matters.
QMS was built around an ambitious technical vision. We’re proud to have Christopher leading the team bringing it to life!
Original Tweet
X | LinkedIn | Medium | Docs
❤7🔥5
This media is not supported in your browser
VIEW IN TELEGRAM
This week, 3 developments showed the post-quantum retrofit challenge moving down the stack: from legacy wallet recovery, to transaction validation agility, to core key-management infrastructure.
1️⃣ A practical post-quantum Bitcoin recovery path is now working.
On July 15, Project Eleven unveiled a post-quantum zero-knowledge proof, developed with Binius lead, Jim Posen. It lets users prove that key material higher in a BIP-32 derivation tree produced a given address without revealing the key material itself.
The prototype generates the proof in 243 ms and verifies it in 40 ms on a laptop (M5 MacBook Air, CPU only), with no trusted setup. It remains an unaudited early prototype and would still require explicit protocol support to recover live assets.
This moves one of the hardest parts of post-Q-Day wallet recovery from theory to a concrete engineering path.
2️⃣ Ethereum is gaining signature agility at the transaction layer.
On July 14, Nethermind opened a WIP PR implementing EIP-8141 Frame Transactions (tx type 0x06). The proposal makes the sender explicit in the payload and separates validation from execution, allowing accounts to define their own validation logic instead of being permanently tied to envelope-level ECDSA.
It creates a clean on-ramp for future post-quantum authentication schemes. The implementation is still incomplete and off-by-default.
Changing a core cryptographic assumption embedded in every transaction is expensive, and this is exactly the kind of plumbing work required.
3️⃣ Post-quantum cryptography is entering the key-management standard stack.
On July 15, OASIS Open announced that PKCS #11 Specification v3.2 and Profiles v3.2 have been approved as OASIS Standards. Version 3.2 adds support for post-quantum mechanisms to Cryptoki, the interface used by HSMs, smart cards, and certificate authorities, while the Profiles document defines conformance requirements for interoperability.
Selecting post-quantum algorithms is only the first step. The infrastructure that actually stores keys and authorizes operations now has a path to support them consistently across vendors.
Original Tweet
X | LinkedIn | Medium | Docs
1️⃣ A practical post-quantum Bitcoin recovery path is now working.
On July 15, Project Eleven unveiled a post-quantum zero-knowledge proof, developed with Binius lead, Jim Posen. It lets users prove that key material higher in a BIP-32 derivation tree produced a given address without revealing the key material itself.
The prototype generates the proof in 243 ms and verifies it in 40 ms on a laptop (M5 MacBook Air, CPU only), with no trusted setup. It remains an unaudited early prototype and would still require explicit protocol support to recover live assets.
This moves one of the hardest parts of post-Q-Day wallet recovery from theory to a concrete engineering path.
2️⃣ Ethereum is gaining signature agility at the transaction layer.
On July 14, Nethermind opened a WIP PR implementing EIP-8141 Frame Transactions (tx type 0x06). The proposal makes the sender explicit in the payload and separates validation from execution, allowing accounts to define their own validation logic instead of being permanently tied to envelope-level ECDSA.
It creates a clean on-ramp for future post-quantum authentication schemes. The implementation is still incomplete and off-by-default.
Changing a core cryptographic assumption embedded in every transaction is expensive, and this is exactly the kind of plumbing work required.
3️⃣ Post-quantum cryptography is entering the key-management standard stack.
On July 15, OASIS Open announced that PKCS #11 Specification v3.2 and Profiles v3.2 have been approved as OASIS Standards. Version 3.2 adds support for post-quantum mechanisms to Cryptoki, the interface used by HSMs, smart cards, and certificate authorities, while the Profiles document defines conformance requirements for interoperability.
Selecting post-quantum algorithms is only the first step. The infrastructure that actually stores keys and authorizes operations now has a path to support them consistently across vendors.
Original Tweet
X | LinkedIn | Medium | Docs
❤3
Many people don’t realize this, banks are further along in post-quantum migration than much of crypto.
Regulators have already pushed financial institutions into multi-year transition plans.
Crypto has a different challenge:
- Wallets
- Exchanges
- Custodians
- Bridges
- Smart contracts
- Users
That’s why post-quantum readiness is easier to design in than retrofit.
Original Tweet
X | LinkedIn | Medium | Docs
Regulators have already pushed financial institutions into multi-year transition plans.
Crypto has a different challenge:
- Wallets
- Exchanges
- Custodians
- Bridges
- Smart contracts
- Users
That’s why post-quantum readiness is easier to design in than retrofit.
Original Tweet
X | LinkedIn | Medium | Docs
❤2
Quantum computing is a geopolitical race now.
The US is putting ~$2B in CHIPS incentives into nine quantum companies and taking minority equity stakes. DOE is targeting a fault-tolerant system by 2028.
Japan invested heavily in quantum alongside a ~$7B chips-and-quantum package.
The UK added up to £2B in March.
Estimates put China's cumulative public spend as high as $15B, and Beijing put quantum first among its "future industries."
And Google's March paper dropped the qubit estimate for breaking secp256k1 below 500,000, roughly 20x lower than the prior best.
Governments are buying the sword and mandating the shield.
Original Tweet
X | LinkedIn | Medium | Docs
The US is putting ~$2B in CHIPS incentives into nine quantum companies and taking minority equity stakes. DOE is targeting a fault-tolerant system by 2028.
Japan invested heavily in quantum alongside a ~$7B chips-and-quantum package.
The UK added up to £2B in March.
Estimates put China's cumulative public spend as high as $15B, and Beijing put quantum first among its "future industries."
And Google's March paper dropped the qubit estimate for breaking secp256k1 below 500,000, roughly 20x lower than the prior best.
Governments are buying the sword and mandating the shield.
Original Tweet
X | LinkedIn | Medium | Docs
👍4❤2
Our CTO, Christopher Portmann, has been elected by the community to the 2026 Concordium Governance Committee.
Reflecting on the appointment, Christopher shared that his time with Concordium has shaped how he approaches L1 architecture - lessons he now applies while building QMS Network’s post-quantum-secure PoUW chain. He also said he’s excited to continue contributing as both ecosystems tackle overlapping challenges.
Original Tweet
X | LinkedIn | Medium | Docs
Reflecting on the appointment, Christopher shared that his time with Concordium has shaped how he approaches L1 architecture - lessons he now applies while building QMS Network’s post-quantum-secure PoUW chain. He also said he’s excited to continue contributing as both ecosystems tackle overlapping challenges.
Original Tweet
X | LinkedIn | Medium | Docs
❤6🔥3
The post-quantum transition cannot wait for a perfect signature algorithm. That is the central message of Cloudflare's latest analysis.
ML-DSA-44 is available today, but it carries real costs. Its signatures are 2,420 bytes, compared with 64 bytes for Ed25519, while its public keys are 1,312 bytes versus 32. NIST advanced nine additional candidates to a third round in June, yet Cloudflare estimates that several promising alternatives may not be widely available until 2033–35.
The deployment timeline matters just as much. Dilithium, the scheme that became ML-DSA, entered the NIST competition in November 2017 and was finalized as a standard in August 2024. The first CMVP certificates for an ML-DSA module followed in March 2026, while Cloudflare does not expect the first ML-DSA certificates in the WebPKI until early 2027.
Standardization is only the beginning. Protocol integration, software support, validation and ecosystem-wide migration take years.
Cloudflare is targeting 2029 to become fully post-quantum secure. The June 2026 US executive order adds further urgency: it directs OMB to require federal agencies to transition high-value assets and high-impact systems to post-quantum key establishment by December 31, 2030, and digital signatures by December 31, 2031.
The deeper lesson is architectural. No single post-quantum signature optimizes size, speed, security and implementation simplicity. Systems must be built around those trade-offs while preparing for a lengthy transition.
During that transition, continued support for classical-only authentication can enable downgrade attacks unless the protocol prevents or detects them. Cloudflare notes that simply switching classical cryptography off is not even an option for many sufficiently distributed systems, including the WebPKI.
This closely aligns with the design QMS is working on: block production requires no digital signatures, post-quantum finality runs asynchronously outside the block-production critical path, and PQ signatures for EVM accounts are introduced gradually.
Original Tweet
X | LinkedIn | Medium | Docs
ML-DSA-44 is available today, but it carries real costs. Its signatures are 2,420 bytes, compared with 64 bytes for Ed25519, while its public keys are 1,312 bytes versus 32. NIST advanced nine additional candidates to a third round in June, yet Cloudflare estimates that several promising alternatives may not be widely available until 2033–35.
The deployment timeline matters just as much. Dilithium, the scheme that became ML-DSA, entered the NIST competition in November 2017 and was finalized as a standard in August 2024. The first CMVP certificates for an ML-DSA module followed in March 2026, while Cloudflare does not expect the first ML-DSA certificates in the WebPKI until early 2027.
Standardization is only the beginning. Protocol integration, software support, validation and ecosystem-wide migration take years.
Cloudflare is targeting 2029 to become fully post-quantum secure. The June 2026 US executive order adds further urgency: it directs OMB to require federal agencies to transition high-value assets and high-impact systems to post-quantum key establishment by December 31, 2030, and digital signatures by December 31, 2031.
The deeper lesson is architectural. No single post-quantum signature optimizes size, speed, security and implementation simplicity. Systems must be built around those trade-offs while preparing for a lengthy transition.
During that transition, continued support for classical-only authentication can enable downgrade attacks unless the protocol prevents or detects them. Cloudflare notes that simply switching classical cryptography off is not even an option for many sufficiently distributed systems, including the WebPKI.
This closely aligns with the design QMS is working on: block production requires no digital signatures, post-quantum finality runs asynchronously outside the block-production critical path, and PQ signatures for EVM accounts are introduced gradually.
Original Tweet
X | LinkedIn | Medium | Docs
❤2👍2