Sui is preparing to introduce post-quantum transaction authentication as part of a broader cryptographic migration aimed at protecting accounts before sufficiently capable quantum computers become a practical threat. According to the Sui official roadmap, native ML-DSA-65 account authentication is targeted for mainnet in Q1 2027, while independent audits and testnet feedback could still change the schedule.
The network is adopting two NIST-standardized signature schemes for different security requirements. ML-DSA-65, standardized under FIPS 204, is intended to become a native protocol option for everyday accounts, while hash-based SLH-DSA-SHA2-128s under FIPS 205 will initially protect high-value vaults through Move smart contracts. Using two different mathematical families reduces dependence on a single post-quantum security assumption.
Sui Builds an Opt-In Migration Path
The most immediate risk addressed by the roadmap sits at the authentication layer. A sufficiently capable quantum computer running algorithms such as Shor’s could theoretically undermine the elliptic-curve signatures used to prove control over blockchain accounts. There is no evidence that such private-key recovery is practical today, making Sui’s work a migration strategy for a future cryptographic risk rather than a response to an existing quantum attack.
Sui’s architecture is designed to avoid forcing users to transfer all their assets into new accounts when post-quantum authentication becomes available. Existing recovery phrases can derive new ML-DSA-65 keys through a separate derivation path, while address aliases allow an account to change its authorization key without changing its address. Users will therefore be able to adopt post-quantum signing while preserving the account and assets they already use.
The initial rollout will also remain optional. Quantum-safe vaults are targeted for mainnet during 2026, native ML-DSA-65 accounts are expected to reach testnet by year-end, and wallet, SDK and CLI support is planned alongside the mainnet authentication rollout. Sui says the core implementation has been built and benchmarked, but it is not yet a finished and fully audited production capability.
That distinction places Sui somewhere between research-stage planning and production deployment. NEAR has already activated ML-DSA-65 account signing on mainnet, while the Stellar network is pursuing a phased quantum migration that similarly separates early contract-level support from later protocol-level signer changes. The emerging pattern is gradual account migration rather than an abrupt replacement of classical cryptography across an entire blockchain.
Quantum Security Extends Beyond Account Signatures
Native post-quantum accounts would address an important attack surface, but they would not make every component of Sui resistant to quantum cryptanalysis. Blockchain systems rely on multiple cryptographic primitives across user authentication, validators, bridges, encryption and zero-knowledge systems. Protecting transaction signatures is therefore one layer of a broader cryptographic transition rather than a complete quantum-security endpoint.
Sui’s choice of ML-DSA-65 reflects that caution. The scheme uses NIST security category 3 rather than a lower-security parameter set, while the separate SLH-DSA vault design relies on hash-based cryptography. For high-value accounts, Sui also plans to support ML-DSA within multisig configurations, creating the possibility of requiring both classical and post-quantum authorization. The objective is cryptographic diversity rather than relying exclusively on one new signature system.
The roadmap also expands a security strategy that already operates across very different threat boundaries. Sui’s recent ecosystem program has blocked more than 3,000 phishing and impersonation threats, addressing malicious domains and social engineering rather than cryptographic weaknesses. Post-quantum authentication tackles a fundamentally different problem: preserving ownership guarantees if today’s signature mathematics eventually becomes vulnerable.
For now, no migration is required from Sui users or applications. The Q1 2027 target represents the current mainnet objective for native ML-DSA-65 authentication, not a fixed activation date, and Sui says it would delay deployment rather than ship an unaudited authenticator. The practical milestone will be whether the implementation clears independent review and testnet deployment without introducing new security or operational risks while replacing one of the network’s most fundamental trust mechanisms.
Liam Foster follows crypto markets from France, with a close eye on Bitcoin, Ethereum, Layer 1 assets, derivatives, sentiment and smart money flows. His coverage looks past the daily price move to understand what is happening underneath: liquidity, leverage, positioning and the behavior of larger players.
Liam’s style is calm, sharp and deliberately anti-crystal-ball. He does not frame every market move as a breakout or collapse. Instead, he focuses on what the data can actually support, where traders may be crowded and when a signal deserves attention without becoming a prediction.