Even when Bitcoin finally adopts post-quantum protections for on-chain outputs, 5 components of the Lightning Community’s off-chain cost system would nonetheless want separate upgrades, based on a Sept. 12 analysis preprint.
The paper proposes PQLN, a hybrid post-quantum extension carried out as a rust-lightning analysis prototype. It targets gossip, which distributes node and channel info; encrypted peer connections; signed invoices and reusable cost gives; and onion packets that conceal payment-routing particulars.
Lightning at present makes use of secp256k1-based ECDSA, Schnorr signatures or ECDH throughout these capabilities. PQLN retains the classical mechanisms whereas including ML-DSA signatures to gossip, invoices and gives. It provides hybrid ML-KEM key alternate to move, cost onions and BOLT 12 privateness paths.
The authors constructed a feature-gated rust-lightning fork and a modified ldk-sample node. Their 12-scenario matrix discovered that post-quantum and vanilla binaries constructed from the identical rust-lightning base may coexist. Relying on the route and settings, blended setups used classical safety or failed closed.
That compatibility doesn’t set up network-wide readiness. The repositories describe the software program as a analysis artifact, and the examine deferred exams in opposition to different Lightning implementations.
Communication, slightly than uncooked cryptographic computation, dominated the authors’ outcomes. Throughout static synchronization of a full community graph, the default ML-DSA-44 and ML-KEM-768 design elevated gossip downloads 10.2 instances and saved graph knowledge 8.8 instances in contrast with vanilla Lightning.
A smaller Falcon-derived FN-DSA configuration diminished the obtain a number of to 4.2 instances, however NIST nonetheless lists that scheme as below improvement slightly than a closing commonplace.
Non-public cost routing carried one other bandwidth penalty. A set 21.8-kilobyte post-quantum ciphertext checklist added 19 to 53 milliseconds per hop on an emulated 10 Mbit/s hyperlink and 160 to 187 milliseconds per hop at 1 Mbit/s.
In contrast, ML-DSA-44 signing averaged 327 microseconds on the authors’ 16-core AMD Ryzen Threadripper PRO 3955WX workstation with 64 GB of RAM. That author-run, hardware-specific primitive measurement shouldn’t be learn as end-to-end cost latency.
PQLN additionally leaves Bitcoin-rooted dangers untouched. It doesn’t safe the on-chain keys defending funding, dedication and HTLC outputs or penalty transactions, so safeguarding channel funds nonetheless requires Bitcoin-layer post-quantum modifications.
The preprint assumes a future cryptographically related quantum adversary; it doesn’t report a present-day quantum compromise of Bitcoin or Lightning. Its prototype suggests Lightning’s off-chain defenses could be examined independently of a Bitcoin improve, however not that the community is able to migrate. In these experiments, the exhausting operational query was how a lot further gossip, storage and cost visitors node operators may soak up.
