CryptoSlate
A research preprint proposes PQLN, a hybrid post-quantum extension for Bitcoin’s Lightning Network, while highlighting five off-chain areas that need separate protection: gossip, encrypted peer connections, signed invoices and offers, onion packets, and BOLT 12 privacy paths. The rust-lightning prototype adds ML-DSA signatures and hybrid ML-KEM key exchange alongside existing cryptography.
Why it matters
Bitcoin adopting post-quantum protections for on-chain outputs would not automatically secure Lightning channels or their privacy systems. PQLN leaves funding, commitment, HTLC and penalty transaction keys untouched, so channel funds would still require Bitcoin-layer changes.
The prototype showed that post-quantum and standard Lightning binaries could coexist in 12 scenarios. Depending on route and settings, mixed configurations either used classical protection or failed closed. The result demonstrates a path for independent testing, not network-wide migration readiness. The repositories describe the software as a research artifact, and the study did not test other Lightning implementations.
Market impact
The main constraint was communications overhead rather than raw cryptographic computation. With default ML-DSA-44 and ML-KEM-768 settings, static full-graph synchronization increased gossip downloads 10.2 times and stored graph data 8.8 times compared with vanilla Lightning. A smaller FN-DSA configuration reduced the download increase to 4.2 times, but NIST still lists that scheme as under development.
Private routing also carried a bandwidth cost. A fixed 21.8-kilobyte post-quantum ciphertext list added 19 to 53 milliseconds per hop on a 10 Mbit/s link, and 160 to 187 milliseconds at 1 Mbit/s. The paper reports no present-day quantum compromise of Bitcoin or Lightning. For node operators, the investable question is whether future privacy upgrades can preserve Lightning’s economics while absorbing higher traffic, storage and compatibility costs.
Frequently asked questions
-
What does PQLN add to Bitcoin Lightning?
PQLN is a hybrid post-quantum extension for rust-lightning. It adds ML-DSA signatures and hybrid ML-KEM key exchange across gossip, transport, invoices, offers and onion routing.
-
Why would a Bitcoin upgrade not fully protect Lightning?
Lightning uses separate off-chain systems for communication, invoices, routing and channel operations. PQLN also leaves Bitcoin-rooted keys for funding, commitment, HTLC and penalty transactions untouched.
-
How much extra network traffic did the prototype create?
Default ML-DSA-44 and ML-KEM-768 settings increased full-graph gossip downloads 10.2 times and stored graph data 8.8 times versus vanilla Lightning. A smaller FN-DSA configuration reduced the download increase to 4.2 times.
-
Did the study show a current quantum attack on Bitcoin or Lightning?
No. The preprint assumes a future cryptographically relevant quantum adversary and reports no present-day quantum compromise of Bitcoin or Lightning.
-
What was the effect on private Lightning payment routing?
A fixed 21.8-kilobyte post-quantum ciphertext list added 19 to 53 milliseconds per hop on a 10 Mbit/s link and 160 to 187 milliseconds per hop at 1 Mbit/s.
CoinTelegraph
WatcherGuru
WuBlockchain
Glassnode
TheBlock
Crypto News
CoinDesk