Quantum-Safe Cross-Chain & Wallet Security Engine
Today's blockchains sign with ECDSA or Ed25519. A large quantum computer running Shor's algorithm can break those signatures. Q-Relay is a desktop app and an open-source CLI that measures your quantum exposure, adds post-quantum signatures, and moves long-term assets into a quantum-safe vault.
Real on-chain analysis. Your browser queries a public RPC node directly: EVM bytecode is disassembled and Solana programs are parsed byte by byte. No backend, nothing is stored. The score is a transparent heuristic built from the findings listed below it.
Generates 256 bits of key material in your browser. It mixes OS entropy (Web Crypto) with quantum random numbers from ANU QRNG through HKDF-SHA256, so a failure in one source cannot weaken the result. The ANU API needs a free API key; without one, only OS entropy is used and the output says so.
One engine, four jobs: measure the risk, sign safely, generate keys, and store the assets that matter.
Hybrid signature layer. Every transaction carries a standard signature plus a second, NIST-approved post-quantum signature (ML-DSA, formerly CRYSTALS-Dilithium, or FN-DSA, formerly Falcon).
The contract or relay network approves the transaction only when both signatures are valid. It works with your existing Phantom or MetaMask wallet through a hybrid signature wrapper.
Standard wallets build seed phrases from pseudo-random (PRNG) math. Q-Relay feeds key generation with entropy from quantum fluctuations and atmospheric noise: the ANU QRNG API or local quantum hardware.
The result is a key generated from a source that is unpredictable by physics, not only by computation.
Paste a Solana or EVM contract address. Q-Relay inspects its signature verification, hash use and authority keys, then reports how exposed the contract would be on Q-Day as a percentage Quantum Risk Score.
A multi-layer cold/hot hybrid panel for high-value assets such as NFTs and large token holdings. Move existing assets into a quantum-safe smart vault in one click, protected by time-lock and lattice-based cryptography.
From install to a fully isolated vault, in four steps.
Two faces: a desktop app for security and wallet management, and a CLI for developers.
| Layer | Choice | Why |
|---|---|---|
| Core & CLI | Rust | Industry standard for Solana and high-security crypto infrastructure, with strong memory safety. |
| GUI | Tauri + React / TypeScript | Lighter, faster and safer than Electron. |
| PQC | liboqs (Open Quantum Safe) | C/Rust wrapper for NIST-approved post-quantum algorithms. |
| Chains | ethers-rs, solana-sdk | EVM and Solana access for traditional networks. |
| Randomness | ANU QRNG API or local quantum chip | Real quantum entropy source. |
Design decisions we are building around, so the security claims stay honest.
Ethereum and Solana validators check only ECDSA or Ed25519. A second signature is invisible to the chain unless funds sit in a smart account that requires both: ERC-4337 on EVM, a custom program on Solana. Modules A and D therefore merge into one PQ-verifying vault. Dilithium verification is gas-expensive on EVM; hash-based schemes (Winternitz-style) are more practical on Solana today.
Pulling entropy over the internet makes a third party part of your trust. The OS CSPRNG is already practically unpredictable. Q-Relay combines QRNG output with OS entropy through HKDF or XOR, so one failing source cannot weaken the key.
SHA-256 and Keccak stay safe: Grover's algorithm cuts a 256-bit hash to about 128 bits of strength, which is still strong. The real risks:
The risk score is built on these. On EVM the scanner looks for precompile calls (0x01 ecrecover, 0x08 pairing). On Solana it checks upgrade authority and ed25519 program use.
ML-DSA (Dilithium, FIPS 204), SLH-DSA (SPHINCS+, FIPS 205), FN-DSA (Falcon). Falcon signatures are small but need floating point, so implementation is delicate. liboqs suits prototypes; pure-Rust implementations exist for production. Do not put real funds in the vault before an independent audit.