Live on Starknet

Quantum-proof wallets. No hard fork required.

Starknet's account abstraction lets you upgrade to post-quantum signatures today. This is a working demo — generate keys, sign, verify, and deploy. All in your browser.

65%savings
Less gas than secp256r1
62felts
17x calldata compression
29slots
Fits one contract

The Quantum Challenge

Quantum computing is coming for ECDSA

Shor’s algorithm will eventually break the signature scheme that secures most blockchain wallets today. The entire ecosystem — Ethereum, L2s, and beyond — needs to prepare.

The transition is hard, but it’s starting

Ethereum’s roadmap now includes quantum resistance, but upgrading a protocol-level signature scheme means hard forks, new address formats, and wallet migrations. That takes time. On Starknet, you don’t have to wait.

Starknet is ready today.

While the ecosystem works toward protocol-level quantum resistance, Starknet's account abstraction lets you act now. Deploy a new account contract with post-quantum signatures — no protocol change, no hard fork, no migration.

01

Native Account Abstraction

Signature logic lives in the contract, not the protocol. Every wallet chooses its own verification.

02

Falcon-512

NIST-standardized lattice-based signatures. Battle-tested math with tight security proofs.

03

Cheaper than ECDSA

~9.5M L2 gas — only 2x garaga ECDSA, 65% less than secp256r1 syscall. Quantum safety at competitive cost.

Faster than the signature scheme you use today

Falcon-512 verification: ~9.5M L2 gas. secp256r1 via syscall: ~27.4M. Via garaga (pure Cairo): ~4.6M. Post-quantum security at 2x the cost of garaga ECDSA — and quantum-safe.

secp256r1 syscall
~27.4M
secp256k1 syscall
~16.6M
Falcon-512
~9.5M
secp256r1 garaga
~4.6M
secp256k1 garaga
~4.5M

L2 gas — signature verification (lower is better)

17x calldata compression

512 Zq coefficients packed into 29 felt252 storage slots. 1,030 felts reduced to 62 felts on-chain.

Try it yourself

What happens on-chain

Deploy your own quantum-safe account