Quantum Threat Drives $7 Billion Push to Secure Crypto Infrastructure

Quantum computers capable of breaking 256‑bit elliptic‑curve cryptography are still years away, but the cost of preparing for that eventuality is already materialising. Google researchers estimate that a sufficiently advanced quantum machine could break such keys in minutes, putting at risk wallets, custody systems and blockchain signatures that rely on the same algorithms.

Institutional Inventory and the Cryptographic Bill of Materials

Experts from BitGo, Nethermind and academia agree that the first step is a comprehensive inventory of every use of vulnerable cryptography – signing systems, hardware modules, recovery procedures, authentication mechanisms and long‑lived keys. Nigel Smart describes this as a “Cryptographic Bill of Materials”. NIST also places discovery and prioritisation at the start of its transition roadmap.

Threshold Signing and Multi‑Party Computation Challenges

Institutional custody relies on threshold signing and multi‑party computation (MPC). While MPC distributes computation, it does not change the underlying algorithm, meaning threshold ECDSA remains vulnerable. Current post‑quantum candidates such as Falcon lack viable threshold constructions, and research presented at NIST’s MPTS workshop highlighted severe efficiency penalties for threshold signing with hash‑based signatures.

Impact of Larger Post‑Quantum Signatures

Post‑quantum schemes require much larger keys and signatures. For example, NIST’s ML‑DSA‑65 uses a 3,309‑byte signature and a 1,952‑byte public key, compared with elliptic‑curve signatures measured in tens of bytes. On blockchains, larger signatures increase bandwidth, storage and transaction fees, and complicate aggregation for proof‑of‑stake consensus.

Who Bears the Migration Cost?

Smart expects the burden to be shared among protocol developers, custodians, service providers and asset owners. Gaur argues for a centrally funded, senior‑owned budget similar to past large‑scale migrations such as Y2K. Public blockchains face additional governance challenges because there is no single entity that can enforce upgrades across all participants.

Timeline and Funding

The U.S. government is budgeting billions to move federal systems to post‑quantum standards, and NIST aims to phase out vulnerable algorithms by 2035. Crypto projects have set their own targets: Ethereum plans core post‑quantum protections around 2029, while other chains such as Solana, Algorand and TRON have already adopted Falcon for certain functions.

Key Cost Drivers

• Comprehensive cryptographic inventory and dependency mapping.
• Replacement of hardware that cannot be upgraded.
• Running classical and post‑quantum systems in parallel during testing.
• Re‑auditing, re‑certifying and updating custody procedures.
• On‑chain transaction fees for larger post‑quantum signatures.