chain · quantum risk
Is Internet Computer (ICP) Quantum Proof?
Verdict
Internet Computer should not be labeled quantum-proof without mapping chain-key cryptography, user wallets, and boundary nodes to concrete algorithms. Complexity requires documentation—not slogans.
Overview
The Internet Computer uses distinctive cryptography narratives (including threshold/chain-key ideas) alongside user-facing wallets. That sophistication can be a strength for some threat models and still leave classical assumptions in places.
Buyers and researchers must read current DFINITY/IC crypto docs rather than assuming “advanced” equals “NIST PQC complete.”
Cryptographic profile
- Signatures: Threshold / chain-key cryptography narratives plus user wallet schemes (verify DFINITY docs)
- Hash: IC protocol hashing
- Public-key exposure: Canister and user key models differ from simple EOAs—read primary docs for current schemes.
What breaks
- Classical signatures authorizing ICP value movement under Shor-class adversaries once public keys are known
- Custodial hot wallets and exchange operational keys
- Bridges or wrapped representations with concentrated signers (if used)
Mitigations
- Inventory every key that can move ICP (self-custody, exchange, multisig)
- Prefer multiparty / hardware policies for treasuries
- Document bridges and wrapped asset paths
- Track ecosystem PQC research; do not assume branding equals deployment
- Use /assessment and chain comparison hubs on this site for program framing
FAQ
Is chain-key cryptography quantum-proof?
Evaluate the specific schemes and parameters. Do not equate threshold crypto with post-quantum safety automatically.
What is the diligence path?
Primary papers/docs → algorithm names → implementation repos → residual classical paths.
Key concepts (technical dictionary)
Terms used on this page — open a definition: