Hardy Index Quantum readiness, rated and tracked

Cryptography registry

ECDSA on secp256r1

The Elliptic Curve Digital Signature Algorithm over the NIST P-256 curve, also named secp256r1. It is the curve in most passkeys, secure enclaves and hardware security modules, which is why chains offer it as an account option. Broken by Shor's algorithm on a cryptographically relevant quantum computer, which recovers the private key from the public key.

Quantum status
Broken by Shor's algorithm
Standard
FIPS 186-5 (P-256), final
Family
elliptic curve
Also known as
secp256r1, P-256, prime256v1

Rated chains using it

  • Aptos Mainnet, opt-in

    Account signatures. WebAuthn (passkey) accounts sign with Secp256r1 ECDSA under the generalised scheme. Keyless accounts, which authenticate through an OpenID login and a zero-knowledge proof, are a further option the registry has no entry for; none of these options is post-quantum. Specification or proposal

  • Chiliz Chain Mainnet, opt-in

    Contract level. P-256 verification precompile in the Prague precompile set, active on mainnet since the Pectra hard fork of 30 June 2026. Source code or release

  • Conflux Mainnet, opt-in

    Contract level. P-256 verification precompile under CIP-167, following EIP-7951, activated in the v3.1 hard fork. Specification or proposal

  • Flare Mainnet, default

    Validator consensus. New staking certificates are generated with ECDSA on P-256, and proposervm signs each proposed block with the staking key. The signature identifies the proposer the stake-weighted windower picked for that slot; Snowman finalises blocks by repeated sub-sampled voting among validators, not by collecting signatures. Signature checks also accept RSA certificates, which the registry does not yet list. Source code or release

  • Gnosis Chain Mainnet, opt-in

    Contract level. EIP-7951 P-256 precompile, activated unmodified in the Fusaka upgrade on 14 April 2026. Specification or proposal

  • IOTA Mainnet, opt-in

    Account signatures. Chosen account by account; Ed25519 stays the default. Specification or proposal

  • Monad Mainnet, opt-in

    Contract level. P-256 precompile at 0x0100 (EIP-7951), used by smart accounts for passkeys. Specification or proposal

  • Neo Mainnet, default

    Account signatures. Standard accounts verify through System.Crypto.CheckSig and CheckMultisig on secp256r1. An account is a script hash, so a contract account can verify differently. Source code or release

  • Neo Mainnet, mandatory

    Validator consensus. dBFT committee and validator keys are secp256r1 points. Source code or release

  • Polygon PoS Mainnet, opt-in

    Contract level. P-256 verification precompile following RIP-7212, used by smart accounts for passkeys. Final, shipped in the Napoli hard fork. Specification or proposal

  • Tezos Mainnet, opt-in

    Account signatures. tz3 addresses, P-256. Specification or proposal

  • Tezos Mainnet, opt-in

    Validator consensus. A baker's consensus key may be a tz3 key, P-256. Specification or proposal

  • Vaulta Mainnet, opt-in

    Account signatures, R1. R1 keys on the P-256 curve, chosen permission by permission. Source code or release

  • Vaulta Mainnet, opt-in

    Account signatures, WebAuthn (WA). WebAuthn keys over P-256, activated as the WEBAUTHN_KEY protocol feature at block 195,440,162 on 21 July 2021. Read on-chain

Sources

Published beside the Hardy Score and not an input to it. How each chain is scored is set out in the methodology.