Solana developers and ecosystem partners are moving to adopt the Falcon post-quantum signature scheme as the core of a phased quantum-readiness roadmap. The plan is designed to protect wallets against future quantum threats while preserving Solana’s high-throughput performance profile.
The decision matters because post-quantum security is not a simple upgrade. Falcon offers stronger protection against a future quantum adversary, but it also introduces larger signatures and higher verification costs that could affect transaction size, bandwidth and validator performance if not carefully optimized.
Falcon Offers Compact Security, but With Real Tradeoffs
Solana selected Falcon, also known as FN-DSA, because it provides relatively compact signatures compared with other NIST-approved post-quantum schemes. Falcon-512 produces signatures of about 666 bytes and public keys of about 897 bytes, compared with the 64-byte Ed25519 signatures Solana uses today.
That size difference is still significant, but Falcon’s efficiency among lattice-based schemes made it a practical candidate for a high-throughput blockchain. The engineering challenge is to gain quantum resistance without turning every transaction into a performance burden.
Project Eleven’s assessment, commissioned as part of the initiative, warned that Solana’s current signature model could expose existing public keys under a plausible future quantum-attack scenario. The report estimated that such an attack would require fewer than 1,200 logical qubits, roughly 70 million to 90 million quantum gate operations and fewer than 500,000 physical qubits.
Early testing showed the stakes clearly. Post-quantum signatures could be up to 40 times larger than Ed25519, and a naive implementation could reduce network speed by an estimated 90%. Those figures make optimization central to the roadmap.
Wallet Migration Will Be a Phased Ecosystem Effort
Developers have outlined a three-phase transition. Phase I focuses on research, benchmarking and continued testing of Falcon and alternative schemes. Phase II would establish new wallet standards so newly created addresses are post-quantum from inception. Phase III would introduce user migration tools and re-signing mechanisms to move existing assets to post-quantum keys once the threat becomes credible.
Escalation triggers include meaningful advances in quantum hardware or warnings from standards bodies. Until then, the priority is readiness: benchmarking implementations, preparing wallet standards and ensuring validators can process larger signatures without disrupting network performance.
Mitigations are already underway. Firedancer and Anza teams have developed optimized Falcon verification implementations using CPU-level tuning, NUMA-aware scheduling, lock-free concurrency and AF_XDP packet handling. Solana also plans transaction-format changes to handle larger signatures more efficiently.
The roadmap creates a clear mandate to prepare for key rotation and PQC-compatible infrastructure. If quantum hardware approaches the capabilities modeled by Project Eleven, existing keys could become exposed quickly, turning migration from a long-term planning exercise into an urgent operational requirement.
Solana’s post-quantum transition will ultimately be judged on execution. The network must integrate stronger cryptography without sacrificing the speed and usability that define its market position. For now, the focus is on optimization, staged migration and ensuring the ecosystem can move before quantum risk becomes immediate.
