Mentioned in This Article
1. Zcash Post-Quantum Signatures Targeted for January
On October 8, Zakura, the developer team behind a Zcash full node, published a plan to make the network's transparent payments resistant to attacks from quantum computers and AI-driven mathematics. The team expects hash-based signature opcodes to arrive in January, and a companion privacy tool for rotating addresses is being rolled out this week in the Vizor wallet.
The proposal arrives while the wider crypto industry argues over how quickly digital signatures could come under threat. Zakura's contribution is concrete rather than theoretical: it describes specific signature machinery, a specific wallet behavior and a specific privacy technique intended to keep that behavior from exposing users.
An engineering post by Roman Akhtariev describes the stated goal as full post-quantum safe transparent pools with hash-based signatures. The phrase matters because it defines the scope. The plan is not a redesign of everything Zcash does; it targets the portion of the network where funds sit under publicly visible addresses.
Zakura summarized the effort in a public message, saying the plan is for quantum-safe, unlinkable, rotating transparent addresses, and that it is possible with Zcash today. The timeline comes from the team itself, and no network-wide activation date has been confirmed.
2. How Do Zcash Transparent and Shielded Payments Differ?
Zcash supports two kinds of payments. Shielded payments conceal the sender, the recipient and the amount, while transparent payments are visible to anyone, much as transactions on Bitcoin are. The Zakura plan concerns only the second kind.
A transparent address does not display a public key directly. Instead it contains a hash of that key. The key itself remains hidden until the owner spends from the address, at which point the spending transaction reveals it on the blockchain for everyone to read.
That design gives a modest layer of protection. As long as funds have never left an address, an attacker has only a hash to work with, and reversing a hash is considered far harder than attacking an exposed key. Once the key becomes public, however, the protection ends, and any coins still sitting at that same address are exposed to whoever can derive the private key from the public one.
The practical consequence is that reusing an address is riskier than it looks. Every time a wallet spends part of a balance and leaves the change at the same address, the public key is already on the ledger while real value remains at stake. Security practitioners have long advised against address reuse for privacy reasons, and the quantum debate adds a second, security-related reason.
This is the weakness that quantum and AI-related warnings focus on. Today's widely used signature schemes rest on elliptic-curve mathematics. Researchers worry that a sufficiently capable quantum computer, or a breakthrough in mathematical methods, could eventually compute a private key from a revealed public key.
3. What Is the Quantum-Safe Plan for Transparent Addresses?
Zakura proposes two defenses that work together. The first is address rotation: a wallet would move to a fresh address after every transaction, so that a public key is not left sitting in view next to a balance. If a key is exposed only at the moment of spending, and the remaining funds sit at a new address, there is little left behind for an attacker to target.
The second defense is a hash-based backup signature known as WOTS. Hash-based schemes avoid the elliptic-curve mathematics that researchers fear could one day fall to quantum machines or AI-assisted methods. Their security depends on hash functions, which are not known to be vulnerable to the same attacks.
The team expects the necessary post-quantum signature opcodes to land in January. Opcodes are low-level instructions in the transaction scripting system, and adding new ones gives the network a way to verify a different type of signature than it checks today.
The reason a hash-based scheme such as WOTS is considered attractive is its simplicity of assumption. The name refers to the Winternitz one-time signature, a design in which each key pair is meant to sign a single message. That limitation explains why the plan pairs it with rotation: if every address is used once, a one-time signature fits naturally, because there is no second spend that would reuse the key.
In effect, the plan layers a hash-based safety net underneath the existing transparent system. Rotation reduces how often a key is exposed, and the new signature type means that even an exposed key would not be enough on its own to forge a spend.
4. Why Does Address Rotation Create a Privacy Problem?
Rotating addresses solves one problem and introduces another. A wallet that uses a new address for every transaction ends up with many addresses, and to display a balance it has to ask a server about all of them.
When one wallet queries a server about a long list of addresses, the server can reasonably conclude that they belong to the same person. The privacy that rotation was meant to protect, namely the inability to link a person's activity together, is therefore weakened at the point where the wallet talks to the network.
This is the linkability issue that Zakura says it has already addressed. The team contrasted its approach with others who worry about the viability of rotating transparent addresses, arguing that it is already solving the linkability concern rather than leaving it open.
The distinction is significant for a privacy-focused network. A quantum-safe address scheme that exposed which addresses belong together would undermine one of the main reasons people choose Zcash in the first place.
5. How Does Private Information Retrieval Help?
Zakura's answer is private information retrieval, usually abbreviated PIR. It is a cryptographic technique that lets a client fetch records from a server without the server learning which records were requested.
Applied to a wallet, PIR means the software can look up information about its many rotating addresses while the server remains unable to tell that those lookups come from one user. The server answers the queries but cannot connect them.
The feature is rolling out this week in the Vizor wallet. Users who want to try it can switch on an option labeled private queries in the wallet's settings.
Pairing rotation with PIR is what turns the idea from a security measure into a usable privacy feature. Rotation alone protects keys but leaks relationships between addresses; PIR hides those relationships; and the hash-based signature adds protection that does not rely on elliptic-curve assumptions.
6. What Prompted the Timing?
The announcement follows a warning from Justin Drake, a researcher at the Ethereum Foundation, who that week urged holders to move funds calmly to fresh addresses. The public reaction to that advice was not calm, and the idea of a so-called bunker mode has since been debated across the industry.
Drake argued that AI-driven mathematics could break the ECDSA signatures that secure Bitcoin (BTC) and Ethereum (ETH) before quantum computers do. He said this could happen in the worst case in months rather than years.
Ethereum co-founder Vitalik Buterin later said it was plausible that AI-driven advances in mathematics could break encryption within two years. These are views offered as part of an ongoing debate, not established facts, and neither statement amounts to evidence that any attack is imminent.
The episode illustrates a broader tension for blockchain developers. Upgrading cryptography on a live network is slow, because wallets, exchanges, node operators and users must all move together. Teams that begin preparing early have more time to test changes, and the debate over timing is partly a debate over how much lead time the industry needs.
Zakura's plan is positioned as a practical response to that discussion. Instead of arguing about probabilities, the team set out a path that protects users whichever threat, quantum or AI-driven, turns out to be nearer.
7. What Are the Limits of the Proposal?
The plan covers only Zcash's transparent side. Shielded funds are handled by a different cryptographic design and are not the subject of this announcement.
The Zakura post also did not say how or when the new opcodes would be activated across the network. A January expectation from one development team is not the same as a scheduled network upgrade, which normally requires agreement among node software developers and other participants before it takes effect.
It is also worth noting what the announcement does not claim. It does not state that Zcash is under threat today, and it does not offer a date by which attacks are expected. It is a plan for hardening one part of the network ahead of whatever risk emerges, framed by the team as achievable with the features Zcash already has.
For users, this means the benefits will arrive in stages. Address rotation with private queries is available to try in one wallet this week, while the hash-based signatures depend on the opcodes being adopted by the network.
8. What Comes Next for Zcash?
The next milestone is January, when Zakura expects the post-quantum signature opcodes to arrive. Whether they become active network-wide will depend on a process that the team has not yet detailed.
In the meantime, the Vizor wallet rollout provides an early test of whether private queries and address rotation work smoothly in everyday use. Feedback from that test is likely to shape how other wallets approach the same problem.
The wider debate over quantum and AI risks to signatures is also unresolved. As researchers and developers continue to weigh the warnings from figures such as Drake and Buterin, Zcash's transparent-pool approach offers one worked example of how a network might harden itself without abandoning privacy.