Quantum-Resistant Cryptography: Why Blockchains and Banks Face Different Timelines

WASHINGTON — Financial networks are working to replace encryption vulnerable to future quantum computers, but blockchain protocols and traditional banks face different migration challenges. U.S. directives and international standards set 2030 to 2035 as the target window for phasing out legacy public-key encryption, which protects hundreds of trillions of dollars in daily transactions, interbank settlements and proprietary communications.

The threat centers on quantum processors that could run Shor’s algorithm, formulated in 1994 to solve prime factorization and discrete logarithm problems in polynomial time. Once a system has the fault-tolerant physical qubit capacity needed to reach the threshold commonly called “Q-Day,” it could break asymmetric cryptographic algorithms including RSA (Rivest–Shamir–Adleman), Elliptic Curve Diffie-Hellman (ECDH) and the Elliptic Curve Digital Signature Algorithm (ECDSA).

Those algorithms underpin internet security, secure socket layer (SSL/TLS) handshakes, digital identities, legacy bank clearing networks and distributed ledger signatures. Intelligence agencies have warned that adversaries are already conducting “Harvest Now, Decrypt Later” (HNDL) operations, intercepting and archiving encrypted data flows for possible decryption when capable quantum hardware becomes available.

The U.S. National Institute of Standards and Technology (NIST) released its first finalized post-quantum cryptographic standards in August 2024. FIPS 203 specifies the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM), derived from CRYSTALS-Kyber, for general encryption and key exchange. FIPS 204 specifies the Module-Lattice-Based Digital Signature Algorithm (ML-DSA), derived from CRYSTALS-Dilithium, as the primary digital-signature standard. FIPS 205 sets out the Stateless Hash-Based Digital Signature Algorithm (SLH-DSA), derived from SPHINCS+, as an alternative based on different mathematical assumptions.

Under Commercial National Security Algorithm Suite 2.0 (CNSA 2.0) guidelines and White House National Security Memorandum 10 (NSM-10), U.S. government agencies, military branches and designated critical infrastructure operators must complete migration to post-quantum cryptography (PQC) across key systems between 2030 and 2035.

For banks, that deadline means retrofitting enterprise software, hardware security modules (HSMs), core banking mainframes and international communications rails. Past modernization efforts show the scale of the coordination involved. SWIFT (Society for Worldwide Interbank Financial Telecommunication) began its migration to the ISO 20022 standard in 2018; the cross-border messaging consortium’s transition required seven years of coordination across more than 11,000 member institutions in 200 countries and territories.

The Federal Reserve began formal planning in 2015 to adopt ISO 20022 for its high-value gross settlement system, Fedwire Funds Service, and finalized the full single-day migration in 2025. The Bank of England began renewing its Real-Time Gross Settlement (RTGS) service in 2016. The service processes hundreds of billions of pounds in interbank payments daily; core completion was originally slated for 2021, but significant structural components were delayed to 2024 and 2025.

Replacing asymmetric cryptography across correspondent banking networks is broader than updating data messaging standards. A full PQC migration requires changes to enterprise Public Key Infrastructure (PKI), root certificate authorities, hardware-bound cryptographic co-processors and third-party vendor integrations that rely on legacy asymmetric key sizes.

Decentralized networks including Bitcoin, Ethereum and Solana have different exposure profiles. They rely on both hash functions and public-key signatures: SHA-256 and Keccak-256, for example, are used in block generation, proof-of-work mining and address creation, while ECDSA on the secp256k1 curve and Ed25519 are used to authorize transactions from public addresses.

Hash functions face Grover’s algorithm, which offers a quadratic rather than exponential speedup. Doubling the key size or using 256-bit hashes provides sufficient mathematical resistance against known quantum search attacks. Digital signatures, by contrast, are vulnerable to Shor’s algorithm if a public key is exposed on-chain.

On Bitcoin, addresses that have never spent funds and use Pay-to-Public-Key-Hash (P2PKH) or Pay-to-Witness-Public-Key-Hash (P2WPKH) expose only a cryptographic hash of the public key. They remain quantum-resistant until an outbound transaction reveals the raw public key to the mempool. Legacy Pay-to-Public-Key (P2PK) addresses, including early coins mined in 2009 and 2010, already contain exposed public keys and could be vulnerable to quantum derivation if left unmigrated.

Any Bitcoin upgrade would require network consensus on a soft-fork or hard-fork to incorporate post-quantum signature schemes, such as Lamport signatures, Winternitz one-time signatures or lattice-based alternatives.

Ethereum developers have placed post-quantum defense integration on the long-term protocol roadmap, with a target readiness window around 2029. Part of the strategy relies on Account Abstraction, standardized through frameworks such as ERC-4337 and subsequent protocol improvements. It separates cryptographic signature verification from the base protocol consensus layer, allowing individual smart contract wallets to replace ECDSA signing logic with quantum-resistant hash-based or lattice-based cryptography.

Those wallets could also use zero-knowledge STARK (Scalable Transparent Arguments of Knowledge) proofs, which rely entirely on collision-resistant hash functions and require no trusted setups.

Chris Perkins, head of crypto at institutional investment firm Franklin Templeton, said the structural adaptability of open-source protocols allows decentralized networks to test, iterate and deploy cryptographic primitives faster than centralized legacy institutions tied to decades-old enterprise stacks.

Startups and independent cryptography laboratories have formed a specialized venture ecosystem to support the transition, developing quantum-hardened custody hardware, post-quantum threshold signature schemes (TSS) and dedicated Layer-1 networks built natively on lattice-based cryptography. As institutional participation in real-world asset (RWA) tokenization and distributed financial rails expands, cryptographic migration is becoming a central benchmark in financial infrastructure risk assessments ahead of the 2030 deadlines.