Even when Bitcoin finally adopts post-quantum protections for on-chain outputs, 5 elements of the Lightning Community’s off-chain fee system would nonetheless want separate upgrades, in response to a Sept. 12 analysis preprint.
The paper proposes PQLN, a hybrid post-quantum extension applied as a rust-lightning analysis prototype. It targets gossip, which distributes node and channel info; encrypted peer connections; signed invoices and reusable fee gives; and onion packets that conceal payment-routing particulars.
Lightning at the moment makes use of secp256k1-based ECDSA, Schnorr signatures or ECDH throughout these features. PQLN retains the classical mechanisms whereas including ML-DSA signatures to gossip, invoices and gives. It provides hybrid ML-KEM key trade to move, fee onions and BOLT 12 privateness paths.
The authors constructed a feature-gated rust-lightning fork and a modified ldk-sample node. Their 12-scenario matrix discovered that post-quantum and vanilla binaries constructed from the identical rust-lightning base may coexist. Relying on the route and settings, blended setups used classical safety or failed closed.
That compatibility doesn’t set up network-wide readiness. The repositories describe the software program as a analysis artifact, and the research deferred exams towards different Lightning implementations.
Communication, moderately than uncooked cryptographic computation, dominated the authors’ outcomes. Throughout static synchronization of a full community graph, the default ML-DSA-44 and ML-KEM-768 design elevated gossip downloads 10.2 instances and saved graph information 8.8 instances in contrast with vanilla Lightning.
A smaller Falcon-derived FN-DSA configuration diminished the obtain a number of to 4.2 instances, however NIST nonetheless lists that scheme as beneath improvement moderately than a remaining commonplace.
Personal fee routing carried one other bandwidth penalty. A set 21.8-kilobyte post-quantum ciphertext record added 19 to 53 milliseconds per hop on an emulated 10 Mbit/s hyperlink and 160 to 187 milliseconds per hop at 1 Mbit/s.
In contrast, ML-DSA-44 signing averaged 327 microseconds on the authors’ 16-core AMD Ryzen Threadripper PRO 3955WX workstation with 64 GB of RAM. That author-run, hardware-specific primitive measurement shouldn’t be learn as end-to-end fee latency.
PQLN additionally leaves Bitcoin-rooted dangers untouched. It doesn’t safe the on-chain keys defending funding, dedication and HTLC outputs or penalty transactions, so safeguarding channel funds nonetheless requires Bitcoin-layer post-quantum adjustments.
The preprint assumes a future cryptographically related quantum adversary; it doesn’t report a present-day quantum compromise of Bitcoin or Lightning. Its prototype suggests Lightning’s off-chain defenses may be examined independently of a Bitcoin improve, however not that the community is able to migrate. In these experiments, the onerous operational query was how a lot further gossip, storage and fee visitors node operators may take in.
