XRP Ledger Foundation designs quantum-resistant accounts using ML-DSA-44. Users add new keys and disable old ones at no extra cost, targeting full transition by 2028.
The XRP Ledger is preparing for a future where quantum computers might crack modern elliptic-curve signatures. According to a design detailed in the XRP Ledger Foundation’s quantum study—featured in its updated 2027 protocol roadmap—account owners could add a quantum-safe signing key and deactivate their original one without increasing the base transaction fee.
This risk is already active on-chain. Each time an account executes a payment, its public key is exposed, which applies to active user accounts and exchange wallets alike. A sufficiently capable quantum computer running Shor’s algorithm could eventually derive the private key using that publicly available data. This proposed solution eliminates that vulnerability by letting owners retire the compromised key once a more secure option has been established.
How the Quantum-Resistant Design Would Work
The proposal introduces a new signing method utilizing ML-DSA-44, a lattice-based signature framework standardized by the U.S. National Institute of Standards and Technology (NIST) in 2024 to defend against quantum threats. Account holders would register the post-quantum key and subsequently deactivate the classical key, leaving the account address and balances intact so that funds do not require relocation.
Because the new signatures and keys are significantly larger, they require 3,732 bytes compared to the 105 bytes of a typical current payment. Taking database and historical overhead into account, the Foundation estimates that each protected transaction needs about 5,331 bytes of storage, up from a 1,704-byte baseline. Despite this larger footprint, the network’s base fee remains unchanged. Since XRP Ledger transaction fees are permanently burned instead of distributed to validators, the burden of extra storage shifts to the network’s operators.
Development work remains ongoing. Engineers are currently fixing inconsistencies where the Python prototype, server, and JavaScript implementations can yield different keys from an identical seed. Network tests and a formal migration study are scheduled for the first half of 2027, followed by additional development and security audits later that year or in 2028. Separately, Ripple has set a target for a complete quantum transition by 2028.
Why Zero Extra Fees Matter for Adoption
Most blockchain networks exploring post-quantum upgrades encounter a distinct hurdle: larger signatures drive up user costs. By keeping base fees steady, the XRP Ledger framework removes a financial obstacle that could otherwise hinder migration. Shifting the storage costs to infrastructure operators instead of regular account holders is a strategy designed to foster widespread adoption once the capability launches.
This framework also acknowledges the timeline of the threat realistically. While quantum computers capable of breaking current cryptographic standards are not anticipated immediately, public key exposure remains permanent. Accounts that have previously transacted stay theoretically vulnerable until their classical keys are disabled. Providing a way for owners to voluntarily secure accounts without forced migrations or higher fees establishes a gradual transition rather than an abrupt cutoff.
Even so, the strategy relies on user participation, as owners must manually turn off their legacy keys. Accounts maintaining both systems would remain partially vulnerable. Custodians, exchanges, and whales will require proper incentives and tools to finalize the transition. The upcoming 2027 migration study will look closely at executing this process effectively at scale.
Broader Implications for Blockchain Security
This XRP Ledger initiative represents one of the most concrete public post-quantum roadmaps available. It combines a NIST-approved algorithm with user-managed migration and steady fee requirements. While alternative networks are investigating hybrid solutions or ongoing research, few have released equivalent specifics covering both the economic framework and cryptographic selection.
For the broader blockchain sector, this highlights that quantum readiness is no longer merely a theoretical discussion since public keys already exist on ledgers. Networks addressing storage and fee challenges early could gain an advantage when institutional participants, regulators, or custodians begin requiring post-quantum security guarantees. The XRP Ledger model—securing accounts, preserving fee structures, and providing a manual switch for owners—presents a practical example for the rest of the industry.
Work remains before any amendment reaches mainnet. Validators must still approve changes, auditors must review the code, and users must be educated. Yet the outline now exists: quantum-resistant accounts without an extra fee, built around a NIST standard, with a clear timeline toward 2028.
Written by
Yuki Yamamoto
