Starknet Accounts Could Enable Quantum-Safe Upgrades Without Migration
StarkWare states that Starknet’s upgradeable accounts allow users to change their signing scheme without altering their wallet address or assets. The company describes this capability as part of a “crypto agility” initiative designed to prepare for potential threats from quantum computing. This means users could transition to quantum-resistant signing methods without having to move their funds or abandon their existing address.
StarkWare’s Claimed Capabilities
StarkWare’s primary assertion is that a quantum upgrade “could force you to leave your wallet address behind,” but Starknet’s accounts circumvent this by enabling changes to signing schemes as they retain the original address and assets. It’s important to interpret this as an announced capability rather than a feature already fully implemented on the mainnet. Though headlines from Bitget and Cryptonomist use the present tense “changes cryptography,” the evidence primarily supports “can change.”
Key points from the available sources include:
- StarkWare claims its upgradeable accounts can switch signing schemes without an address change.
- The company states it achieved a top score of “8/8” in its internal crypto-agility assessment, a benchmark published on its website.
- Starknet is an Ethereum layer-2 solution to enhance transaction throughput and reduce costs.
It’s unclear whether this refers to NIST’s FIPS 204 ML-DSA, a hash-based option like SPHINCS+, or a scheme developed specifically for Starknet.
How the Address Remains Unchanged
Starknet utilizes account contracts, which differ from keys directly tied to an address. The address is associated with the account, and the account itself dictates how signatures are verified. By modifying the verification logic, the address can remain constant.
The source doesn’t specify the user steps involved, such as whether a migration transaction needs to be signed, keys manually rotated, or if no action is required from the user. Thus, the user experience for this process remains an open question.
What to Monitor
The next crucial aspect to track is the deployment stage. There’s no captured evidence indicating a dated mainnet or testnet rollout, a governance vote, or which wallets and SDKs currently support these new signatures. The industry is already addressing quantum security concerns; for instance, Ethereum researcher Justin Drake has warned about the vulnerability of exposed ECDSA public keys. It’s important to distinguish between post-quantum cryptography (PQC), quantum key distribution (QKD), and quantum random number generation (QRNG). Starknet’s claim pertains specifically to post-quantum signatures. For ongoing updates on how networks are preparing for quantum threats, stay informed with QNews.