Zcash Shields Keys from AI and Quantum Attacks
How Zcash Plans to Hide Your Keys From AI and Quantum Attacks
Zakura, a developer of Zcash full node software, is rolling out a new privacy feature in the Vizor wallet this week and says the network could add support for hash-based signatures as soon as January. The changes are part of a broader effort to make Zcash’s transparent payments more resilient if today’s widely used elliptic-curve signatures become vulnerable to future breakthroughs in AI-driven cryptanalysis or quantum computing.
Zcash supports two types of transactions: shielded payments, which hide the sender, recipient and amount, and transparent payments, which are publicly visible in a Bitcoin-like way. The latest steps focus on transparent addresses, where a hash of a public key is visible until the owner spends and the public key is revealed onchain.
Zakura’s approach combines two defenses. First, wallets would rotate to a fresh transparent address after every transaction, aiming to keep public keys out of view for as long as possible. Second, it proposes adding a hash-based backup signature known as WOTS (Winternitz One-Time Signatures). Hash-based signature schemes avoid the elliptic-curve mathematics used by ECDSA, the signature algorithm that secures Bitcoin and, historically, Ethereum accounts.
The push comes amid renewed debate over how quickly existing cryptography could be threatened. Ethereum researcher Justin Drake recently warned that AI-driven advances in mathematics could, in a worst case, break ECDSA “in months not years,” before quantum computers are capable of doing so. Ethereum co-founder Vitalik Buterin later said it was “plausible” that AI-driven advances could break encryption within the next two years.
Address rotation, however, introduces a practical privacy problem: when a wallet asks a server to check balances across many rotated addresses, the server can infer that those addresses belong to the same user. Zakura says it is addressing that linkage risk using private information retrieval (PIR), a cryptographic technique that lets a wallet request records from a server without revealing which records it is fetching.
The PIR-based querying capability is arriving in the Vizor wallet this week. Users can test it by enabling “private queries” in settings, according to Zakura.
On the protocol side, Zakura said its team expects post-quantum signature opcodes to land in Zcash in January, enabling hash-based signatures for transparent payments. An engineering post by Roman Akhtariev described the longer-term goal as “full post-quantum safe transparent pools with hash based signatures.”
While no network activation date has been confirmed, the work highlights a central challenge across major blockchains: upgrading cryptographic foundations without breaking compatibility, while recognizing that some exposures—particularly those involving privacy—cannot be undone once data is made public.
- What happened: Zakura is shipping PIR-based “private queries” in the Vizor wallet this week and expects hash-based signature support for Zcash transparent payments to be possible via new opcodes in January.
- Why it matters: The plan is designed to reduce public-key exposure and add a signature option that does not rely on elliptic-curve cryptography, which some researchers fear could be weakened by AI or future quantum capabilities.
- Broader context: Zcash’s roadmap distinguishes between shielded and transparent transaction security, with these latest steps focused specifically on improving the resilience and privacy of transparent address usage.
