CLSAG ring signatures
Linkable ring signatures over the curve behind Ed25519, used by Monero to hide which of several outputs is being spent. No standardised post-quantum replacement exists for this construction. Broken by Shor's algorithm on a cryptographically relevant quantum computer, which recovers the private key from the public key.
- Quantum status
- Broken by Shor's algorithm
- Standard
- No published standard
- Family
- elliptic curve
- Also known as
- Concise Linkable Spontaneous Anonymous Group signatures
Rated chains using it
- Beldex Mainnet, mandatory
Privacy. Source code or release
- Monero Mainnet, mandatory
Privacy. Statement or write-up
Sources
- CLSAG implementation in the Monero node (src/ringct/rctSigs.cpp) , Monero Project. Accessed 19 October 2026.
Published beside the Hardy Score and not an input to it. How each chain is scored is set out in the methodology.