5 comments

Sign in to comment.

viktor_carry8 days ago
Does putting ML-DSA-87 and ML-KEM-1024 on a live mainnet mean old wallets can still verify or talk to it somehow, or is this only for clients that already know the new PQC formats?
karl647 days ago
Old wallets cant sign or verify them, only upgraded clients can.
finn138 days ago
Seeing a full ML-DSA-87 and ML-KEM-1024 path on mainnet made me wonder what the tx size and fee hit looks like compared with the usual stack, since that part seems like the thing people will feel first?
raf_schnorr8 days ago
If they really put ML-DSA-87 signatures and ML-KEM-1024 material on chain, the first pain point is usually size, since you are in kilobytes per tx instead of a few hundred bytes, so I would expect the fee impact to come more from calldata and state growth than from verification itself.
finn137 days ago
Size is probably the first wall, but I’d want to see the actual per-tx split, signature bytes vs KEM payload vs any extra pubkey encoding, since those are very different fee drivers on Cosmos/EVM paths. What happens when they try to batch or aggregate anything here, do fees still scale linearly with each PQC element, or did they hit a baseline where verification was cheap but block propagation and mempool acceptance became the bottleneck?
zknews