1 day ago
Mysten Labs co-founder and main cryptographer Kostas Chalkias says helium has softly leased a mill to mass-produce quantum-resistant hardware wallet cards for Sui, aiming to support users harmless from a menace that conscionable outgo bitcoin holders astir $130 million.
Key Takeaways
- Kostas Chalkias says helium leased a mill to physique quantum-safe Sui wallet cards astatine scale.
- The target: nether $10 per quantum paper cardinal and 1-2 seconds per NFC quantum signature.
- The determination follows a Coldcard firmware flaw that drained astir $130 cardinal successful BTC since July 30.
A Personal Mission
Kostas “Kryptos” Chalkias, co-founder and main cryptographer astatine Mysten Labs, the institution down the Sui blockchain, revealed that helium has been working connected affordable quantum two-factor authentication (2FA) cards for Sui, adding:
“Last year, with assistance from immoderate friends, I leased a dedicated mill successful a concealed determination to physique quantum-safe wallets astatine scale”
He has acceptable a people of nether $10 per quantum paper cardinal and 1-2 seconds per NFC quantum signature. Chalkias said helium took connected the task utilizing idiosyncratic clip extracurricular his time job, and that helium whitethorn spell arsenic acold arsenic sponsoring the cards for users who can’t spend them.
Moreover, helium straight referenced the caller Coldcard hardware wallet catastrophe arsenic an added impetus to his ongoing mission, writing:
“What happened to Coldcard volition NEVER hap to my people.”
Coinkite, shaper of the fashionable Coldcard hardware wallet, disclosed successful precocious July that a firmware flaw dating backmost to a 2021 update had bypassed the device’s dedicated hardware randomness spot during cardinal generation, substituting a predictable software-based process tied successful immoderate cases to values similar instrumentality serial numbers.
Attackers began draining funds connected July 30, and losses climbed successful waves: astir 594 BTC successful the archetypal wave, astir 1,082 BTC by Aug. 1, and an estimated 2,055 BTC, worthy adjacent to $130 million, from much than 7,700 addresses arsenic the exploit spread. Galaxy Research’s caput of research, Alex Thorn, said astatine slightest 15 antithetic attackers were moving done the remaining susceptible wallets.
And, portion the Coldcard flaw wasn’t a quantum attack, it illustrated the aforesaid underlying hazard Chalkias is trying to get up of, i.e. hardware wallets that softly neglect astatine the cryptographic level, go imaginable onslaught vectors until the funds commencement moving.
Sui’s Broader Quantum Roadmap
The $10 wallet task builds connected enactment already underway astatine the protocol level. Sui has said it plans to adhd 2 signature schemes approved by the National Institute of Standards and Technology (NIST) for quantum resistance, 1 designed for mundane accounts and a 2nd for high-value Move-based vaults.
Existing Sui accounts would beryllium capable to rotate into a quantum-safe cardinal derived from their existing betterment operation alternatively than requiring a afloat migration to a caller wallet. Chalkias has enactment distant Sui’s quality to swap successful caller authentication methods, including post-quantum cryptography, arsenic a structural vantage implicit chains that would request a much disruptive hard fork to marque the aforesaid change.
English (US) 