# PQ Stealth Addresses

Post-quantum stealth addresses as an ERC-5564 scheme extension: key-exchange evidence, reference implementations, and separate spending research.

- [Post-Quantum Stealth Addresses](/index)
- [AI guide (llms.txt)](/ai-guide): How to point an AI assistant or coding agent at this documentation — llms.txt, llms-full.txt and per-page markdown endpoints.
- [Key exchange and address derivation — technical reference](/spec/technical-spec)
- [ERC evidence — key exchange first](/spec/erc-evidence)
- [Key-exchange security — claims and review boundaries](/spec/security-analysis)
- [ERC submission gap analysis — what ethereum/ERCs requires, what we have, what we will contribute](/research/erc-submission-gap-analysis)
- [Project plan — key-exchange ERC and supporting research](/overview/plan)
- [Decisions & Findings (ADR-style log)](/spec/decisions)
- [pq-stealth — executable spec](/impl/python)
- [pq-stealth-client — TypeScript scanning client](/impl/js-client)
- [Lean evidence and supporting research](/lean/)
- [The announcement model](/lean/announcement-model)
- [KEM anonymity from SPR: the two-hop route, and what is missing upstream](/lean/spr-two-hop)
- [Encodings: what is concrete in Lean and what is still a parameter](/lean/encodings)
- [Spending and account research](/research/spending)
- [ML-DSA authorization under format 0x02 — the ml-dsa-44-commit/v0 profile](/research/ml-dsa-commit-profile)
- [Construction A — derivation and spending reference](/research/construction-a)
- [Construction A — security analysis](/research/construction-a-security)
- [Spend forgery as matrix-SIS: the reshaping, its gaps, and the follow-up](/lean/msis-reshaping)
- [EIP-8288 and post-quantum stealth addresses](/research/eip-8288-summary)
- [A SPHINCS- C13 spend authorized by a zero-knowledge proof, over frame transactions](/research/zk-sphincs-frames)
- [ML-DSA spend without an EVM verifier: pre-frame deploy, native keys, pointer signatures](/research/prefix-deploy-native-keys)
- [Classical-spend hybrid (secp256k1 + ML-KEM)](/spec/classical-spend-hybrid)
- [Noir PoC — address-ownership proof (decode-in-reverse MLWE)](/impl/noir)
- [POC: (v, r, s) as pointers — ABI-compatible PQ signatures](/impl/pointer-signatures-poc)
- [Lean tooling and maintainer workflow](/lean/tooling)
- [Tracking the VCVio pin](/lean/vcvio-pin)
- [VCVio: what this development found missing or wrong upstream](/lean/vcvio-upstream)
- [Lean 4 study notes for the PqStealth development](/lean/lean-study-notes)
- [CommitmentAnonymity.lean — module design](/lean/commitment-anonymity-design)
- [What etheorem teaches us (and what it doesn't)](/lean/etheorem-lessons)
- [PqStealth (Lean) — proposed improvements, drafted as GitHub issues](/lean/improvements)
- [DKSAP: sound classically, totally broken given a discrete-log oracle](/lean/dksap-asymmetry)
- [PQ stealth addresses and authenticated UTXO discovery](/research/authenticated-utxo-discovery)
- [The commitment format in the announcement-privacy model](/research/commitment-announcement-privacy)
- [Cost report — measured L1/L2 gas and client-side scanning](/research/cost-report)
- [Composing the scheme-2 spec into ethereum/ERCs, and where Lean evidence can live](/research/erc-lean-composition)
- [Hash-based key exchange (SHA-256 / BLAKE3 commitments) as an ML-KEM alternative: why the lattice is load-bearing](/research/hash-based-key-exchange)
- [After Poseidon: BLAKE2/3, Binius-era proving, and the hash policy for PQ stealth discovery](/research/hash-migration-blake2-binius)
- [Key-blinding prior art — bibliography](/research/key-blinding-bibliography)
- [Keyed and expiring nonces (EIP-8250 / EIP-8266): the protocol grew a nullifier, so we should stop designing one](/research/keyed-nonces-as-nullifiers)
- [Post-Quantum Stealth Addresses as an ERC-5564 Scheme Extension](/research/original-project-plan)
- [Pairwise mode: why fresh encapsulation per announcement stays](/research/pairwise-mode)
- [Poseidon2 + Merkle trees + zk-STARKs for a customized registry/discovery layer](/research/poseidon2-stark-discovery)
- [Stretch goal closed — ERC-4337 spending with post-quantum key exchange and a zero-knowledge ownership proof](/research/stretch-goal-report)
- [Widened-z distribution and signature-route distinguishability](/research/widened-z-distribution)
- [X-Wing as the discovery KEM: what a PQ/T hybrid buys us, and what it doesn't](/research/xwing-hybrid-kem)
- [Lean proof browser](/lean/proofs/)
- [AnonymityFromSPR](/lean/proofs/anonymityfromspr)
- [Blinding](/lean/proofs/blinding)
- [BlindingEntropy](/lean/proofs/blindingentropy)
- [BlindingROM](/lean/proofs/blindingrom)
- [ConstructionA](/lean/proofs/constructiona)
- [ConstructionASecurity](/lean/proofs/constructionasecurity)
- [Controls](/lean/proofs/controls)
- [Demo](/lean/proofs/demo)
- [DKSAP](/lean/proofs/dksap)
- [DKSAPOracle](/lean/proofs/dksaporacle)
- [Games](/lean/proofs/games)
- [Invariants](/lean/proofs/invariants)
- [KEMAnonymity](/lean/proofs/kemanonymity)
- [MLKEM](/lean/proofs/mlkem)
- [MultiRecipient](/lean/proofs/multirecipient)
- [MultiUnlink](/lean/proofs/multiunlink)
- [Ownership](/lean/proofs/ownership)
- [Reorder](/lean/proofs/reorder)
- [ROMUpToBad](/lean/proofs/romuptobad)
- [SharedSecretHiding](/lean/proofs/sharedsecrethiding)
- [Soundness](/lean/proofs/soundness)
- [SpendSecurity](/lean/proofs/spendsecurity)
- [SPRTwoHop](/lean/proofs/sprtwohop)
- [WidenedSigning](/lean/proofs/widenedsigning)