--- title: "BLS signatures on BLS12-381: which blockchains use it" url: "https://hardyindex.com/algorithms/bls12-381" --- # BLS signatures on BLS12-381 Boneh-Lynn-Shacham signatures over the BLS12-381 pairing-friendly curve, used where many signatures must aggregate into one, such as validator attestations. Broken by Shor's algorithm on a cryptographically relevant quantum computer, which recovers the private key from the public key. - **Quantum status:** Broken by Shor's algorithm on a cryptographically relevant quantum computer. - **Standard:** draft-irtf-cfrg-bls-signature (IRTF, draft). - **Family:** pairing. - **Also known as:** BLS. ## Rated chains using it - [0G](https://hardyindex.com/chains/0g.md): validator consensus, mainnet, mandatory. The genesis file in 0G's official mainnet release, Aristotle v1.0.8 (0g-home/0gchaind-home/config/genesis.json, chain ID 0G-mainnet-aristotle), sets consensus.params.validator.pub_key_types to ["bls12_381"], so validators sign CometBFT consensus votes with BLS12-381 keys. The documentation's 48-byte public keys and 96-byte signatures match. The consensus client's source is not public, and genesis sets initial parameters that an upgrade could change. Source (source code or release): https://github.com/0gfoundation/0gchain-Aristotle/releases/tag/v1.0.8 - [Conflux](https://hardyindex.com/chains/conflux.md): validator consensus, mainnet, mandatory. Proof-of-stake committee members sign finality votes with BLS keys, through Conflux's fork of the bls-signatures crate, which builds on BLS12-381. Source (source code or release): https://github.com/Conflux-Chain/conflux-rust/blob/master/crates/pos/crypto/crypto/src/bls.rs - [Dash](https://hardyindex.com/chains/dash.md): validator consensus, mainnet, mandatory. Masternode operator keys and long-living masternode quorum threshold signatures, which sign ChainLocks and InstantSend locks. They finalise blocks and lock inputs; they do not authorise spends. Source (specification or proposal): https://github.com/dashpay/dips/blob/master/dip-0006/bls_signature_scheme.md - [Ethereum](https://hardyindex.com/chains/ethereum.md): validator consensus, mainnet, mandatory. Source (statement or write-up): https://ethereum.org/roadmap/security/quantum-resistance/ - [Filecoin](https://hardyindex.com/chains/filecoin.md): account signatures, mainnet, opt-in. f3 accounts. The address embeds the BLS public key itself. Source (specification or proposal): https://spec.filecoin.io/algorithms/crypto/signatures/ - [Filecoin](https://hardyindex.com/chains/filecoin.md): validator consensus, mainnet, mandatory. A storage provider's worker key, which must be BLS, signs its blocks and election tickets, and signs F3 finality votes, which are aggregated with BLS. A mainnet node returned a current F3 finality certificate on 22 October 2026. Source (specification or proposal): https://github.com/filecoin-project/FIPs/blob/master/FIPS/fip-0086.md - [Filecoin](https://hardyindex.com/chains/filecoin.md): randomness, mainnet, mandatory. The drand quicknet beacon, a BLS12-381 threshold signature with signatures on G1, supplies Filecoin's randomness. Source (specification or proposal): https://github.com/filecoin-project/FIPs/blob/master/FIPS/fip-0063.md - [Gnosis Chain](https://hardyindex.com/chains/gnosis.md): validator consensus, mainnet, mandatory. The Gnosis Beacon Chain follows Ethereum's proof-of-stake consensus specifications with different presets; validators stake GNO through the deposit contract. Source (specification or proposal): https://github.com/gnosischain/specs/blob/master/beacon_chain.md - [Internet Computer](https://hardyindex.com/chains/internet-computer.md): validator consensus, mainnet, mandatory. Consensus, response certification and cross-subnet messaging. Source (specification or proposal): https://docs.internetcomputer.org/concepts/chain-key-cryptography/ - [Internet Computer](https://hardyindex.com/chains/internet-computer.md): randomness, mainnet, mandatory. Source (specification or proposal): https://docs.internetcomputer.org/concepts/chain-key-cryptography/ - [Kaia](https://hardyindex.com/chains/kaia.md): randomness, mainnet, mandatory. KIP-114 randomReveal: the proposer signs the block number with its BLS12-381 key from the KIP-113 registry. Active since the Randao hard fork on 4 March 2024. Source (specification or proposal): https://github.com/kaiachain/kips/blob/main/KIPs/kip-114.md - [Kite](https://hardyindex.com/chains/kite.md): validator consensus, mainnet, mandatory. Each of Kite's twelve L1 validators is registered on the P-Chain with a BLS public key and proof of possession; ACP-77 uses these keys for the aggregate signatures on Warp messages that change an L1's validator set. Source (read on-chain): https://glacier-api.avax.network/v1/networks/mainnet/l1Validators?subnetId=21uUaTxVdR3Sp6SJhpcSrdH1g66aFoE8mPQDvwKJCjXNexo5y6 - [Monad](https://hardyindex.com/chains/monad.md): validator consensus, mainnet, mandatory. Votes and timeouts, aggregated into certificates. Source (specification or proposal): https://docs.monad.xyz/monad-arch/consensus/authentication - [MultiversX](https://hardyindex.com/chains/multiversx.md): validator consensus, mainnet, mandatory. Block-signing keys are generated on the mcl BLS12-381 suite. Validators sign each block in two rounds and at least two thirds of the shares are aggregated into one signature that makes the block final. Source (source code or release): https://github.com/multiversx/mx-chain-crypto-go/blob/main/signing/mcl/suiteBLS12_381.go - [Tezos](https://hardyindex.com/chains/tezos.md): account signatures, mainnet, opt-in. tz4 addresses. Source (specification or proposal): https://octez.tezos.com/docs/active/accounts.html - [Tezos](https://hardyindex.com/chains/tezos.md): validator consensus, mainnet, opt-in. A baker's consensus key may be a tz4 key, used to produce blocks and sign consensus operations. Source (specification or proposal): https://octez.tezos.com/docs/user/key-management.html - [Theta Network](https://hardyindex.com/chains/theta.md): validator consensus, mainnet, mandatory. Guardian nodes seal blocks with BLS signatures on BLS12-381, aggregated into one signature per block. Elite edge node votes are aggregated BLS signatures as well. Source (source code or release): https://github.com/thetatoken/theta-protocol-ledger/blob/master/core/guardian.go - [Vaulta](https://hardyindex.com/chains/vaulta.md): validator consensus, mainnet, mandatory. Savanna finality: the active finalizer policy lists 21 finalizers with BLS12-381 public keys and a threshold of 15. Activated with the SAVANNA protocol feature at block 396,090,329 on 25 September 2024. Source (read on-chain): https://eos.greymass.com/v1/chain/get_finalizer_info ## Sources - [BLS Signatures (Internet-Draft)](https://datatracker.ietf.org/doc/draft-irtf-cfrg-bls-signature/), IRTF Crypto Forum Research Group. Accessed 19 October 2026.