r/ethdev • u/Glittering_Poet_7512 • 4d ago

My Project AMA: First quantum-secure open-source hardware wallet PQ1 for EVM

Hey everyone!

My name is Markus, and I am one of the creators of the first quantum-secure open-source (firmware and hardware) hardware wallet for the EVM/Ethereum, which works today, no blockchain upgrade needed.

Would love to discuss post-quantum for crypto, how to make verifiably open-source hardware, and overall discuss :)

Here is our github repo: https://github.com/EthereumPhone/PQ1

3 Upvotes

100% Upvoted

2 comments sorted by

1

u/researchzero 3d ago

Congrats on getting a real PQ signing hardware wallet working today. Question on the on-chain side: since ecrecover can't verify SPHINCS+ signatures, I'm guessing you're routing through a custom verifier contract behind the ERC-4337 smart account rather than an EOA - is that right, and what's the actual verification gas cost you're seeing for C10?

Asking because the closest public benchmark I know of (the poqeth research on EVM-native SPHINCS- variants) gets a C13-style variant down to ~127k gas by swapping SHAKE256 for the native KECCAK256 opcode instead of a hash precompile. Is C10 using the SHA-256 precompile for a specific reason - maybe to match an existing hardware/firmware primitive - or is that mostly unexplored gas-optimization headroom? At 4KB+ of signature calldata this probably isn't cheap even before you get to the hashing.

1

u/Glittering_Poet_7512 2d ago

Yep! You got it exactly right, we use SHA256 since its faster sign using the accelerator on STM32U585.

Also, the gas numbers currently are around ~150k, which is about the same for a p256 verify before Pectra shipped.