PQ Stealth Addresses

Skip to content

PQ Stealth Addresses

Welcome AI guide (llms.txt)

Key-exchange ERC

Overview Technical reference Evidence and proof scope Security boundaries Submission roadmap Current plan Decision log ERC text (human-written)

Reference implementations

Python reference TypeScript client

KEM proof foundations

Proof scope and module map Generic announcement model KEM anonymity / SPR Encoding results

Spending and account research

Spending research guide ML-DSA-44 committed-key profile Construction A reference Construction A security Ownership / SIS research EIP-8288 assessment C13 ZK experiment Deployment / native-key experiments Classical-spend hybrid MLWE ownership circuit Pointer-signature experiment

Lean tooling and maintenance

Maintainer guide VCVio pin Upstream work Study notes Commitment anonymity module design Engineering lessons Historical improvement log

Other research and history

Classical comparison PQ stealth addresses and authenticated UTXO discovery The commitment format in the announcement-privacy model Cost report — measured L1/L2 gas and client-side scanning Composing the scheme-2 spec into ethereum/ERCs, and where Lean evidence can live Hash-based key exchange (SHA-256 / BLAKE3 commitments) as an ML-KEM alternative: why the lattice is load-bearing After Poseidon: BLAKE2/3, Binius-era proving, and the hash policy for PQ stealth discovery Key-blinding prior art — bibliography Keyed nonces as nullifiers (EIP-8250/8266)Original cohort plan (historical)Pairwise mode: why fresh encapsulation per announcement stays Poseidon2 + Merkle trees + zk-STARKs for a customized registry/discovery layer Stretch goal closed — ERC-4337 spending with post-quantum key exchange and a zero-knowledge ownership proof Widened-z distribution and signature-route distinguishability X-Wing as the discovery KEM: what a PQ/T hybrid buys us, and what it doesn't

Generated proof browser (all tracks)

Lean proof browser AnonymityFromSPR Blinding BlindingEntropy BlindingROM ConstructionA ConstructionASecurity Controls Demo DKSAP DKSAPOracle Games Invariants KEMAnonymity MLKEM MultiRecipient MultiUnlink Ownership Reorder ROMUpToBad SharedSecretHiding Soundness SpendSecurity SPRTwoHop WidenedSigning

Elsewhere

Test vectors (v0)ERC-5564 ERC-6538 pq.ethereum.org

PQ Stealth Addresses

Key exchange
Decisions
Evidence
AI guide

Mirrored page

Source: docs/erc-draft.md. Edit the source file; this copy is regenerated by pnpm sync in wiki/.

Decision logPreviousShift←Python referenceNextShift→