Chain profile
Cardano Vision 2026 makes post-quantum security one of three strategic pillars, with named research deliverables running from primitive assessment to a published migration SIP.
No, not today. Cardano signs transactions with Ed25519 and elects slot leaders using an elliptic-curve verifiable random function, and a sufficiently large quantum computer breaks both. Cardano's answer is a research programme rather than a deployment schedule. Input Output's Cardano Vision 2026 names post-quantum security as one of three strategic pillars and sets out a bottom-up plan: assess state-of-the-art post-quantum building blocks, design a novel post-quantum verifiable random function to replace the one that currently elects slot leaders, produce an end-to-end security proof for an improved Ouroboros protocol, build a prototype, and publish a migration strategy as a Cardano Improvement Proposal. The stated ambition is to make Cardano the first mainstream proof-of-stake blockchain with a formally grounded, evidence-based post-quantum migration strategy. The deliverables are named but, at the time of writing, individual dates for them were not published beyond the 2026 programme cycle.
Where we are making a judgement call Cardano's post-quantum programme names deliverables but, at the time of writing, we could not find published dates for the individual deliverables beyond the 2026 programme cycle. We have dated D3.1 to 2027 as the terminal deliverable in a 2026 research cycle; treat that as our inference, not as a Cardano commitment.
Ed25519 for transaction signing; elliptic-curve VRF for slot-leader election
Not yet selected. A novel post-quantum VRF and quantum-secure replacements for Cardano's signature and key-evolving signature primitives are in design.
None committed. Deliverable D1.1 is an assessment of post-quantum building blocks.
Tier 3: Committed. A funded roadmap with public dates and active research exists, but no post-quantum signature is live on mainnet.
| No. | Dimension | Score | Weight | Contribution |
|---|---|---|---|---|
| 1 | Signature scheme | 0 | 30% | 0.0 |
| 2 | Deployment stage | 5 | 25% | 12.5 |
| 3 | NIST alignment | 5 | 15% | 7.5 |
| 4 | Migration path | 6 | 15% | 9.0 |
| 5 | Exposure | 4 | 10% | 4.0 |
| 6 | Verification | 9 | 5% | 4.5 |
| Hardy Score | 37.5 | |||
Cardano mainnet signs with Ed25519 and its slot-leader election uses an elliptic-curve VRF, both broken by Shor's algorithm. No post-quantum signature is available on mainnet in any form, opt-in or otherwise. source
Tier 3: Committed. Post-quantum security is one of three named pillars of a funded research programme with named deliverables and an identified research lead, and nothing is live on mainnet. source
The programme's first deliverable is assessing state-of-the-art post-quantum building blocks rather than committing to a NIST scheme, and the post-quantum VRF it plans to design is novel research with no standardised counterpart. Cardano has not yet named the signature scheme it intends to adopt. source
A published migration strategy is deliverable D3.1, so the plan for the plan exists rather than the plan itself. Cardano's on-chain governance gives it a credible route to enact a change once designed, and its formal-methods culture means a migration SIP would arrive with proofs attached. source
Cardano uses an extended UTXO model and addresses are built from hashes of payment and staking keys, so a public key is revealed when an output is spent rather than when an address is created. Never-spent holdings are therefore not yet harvestable, but staking keys are widely exposed and most circulating ADA has moved. source
Cardano's research is peer-reviewed and published, the programme names its research lead and enumerates deliverables, the protocol is open source, and the roadmap was put through Cardano's on-chain governance process rather than announced unilaterally. source
The deployment dimension is not a separate judgement. It is Tier 3 expressed as a number. See the tier mapping.
Assess state-of-the-art post-quantum cryptography building blocks for use in Cardano's core primitives. source
Design a novel post-quantum verifiable random function to replace the one currently used to elect slot leaders. source
Produce an end-to-end security proof for an improved, post-quantum-secure Ouroboros protocol. source
Build a prototype implementing the post-quantum Ouroboros design. source
Publish a post-quantum migration strategy as a Cardano Improvement Proposal. source
Exposure measures how much of the chain's value already sits behind a public key that an attacker can record today and break later. This is the part of the threat that a future upgrade cannot undo.
Cardano's extended UTXO model gives it a structural advantage over account-model chains. A Cardano address is built from hashes of the payment and staking keys, so the payment public key is not on-chain until an output is spent. ADA that has been received and never moved is therefore not harvestable today. The qualifier is that staking keys are widely visible through delegation certificates, and most circulating ADA has been spent at least once, so the unexposed share is smaller than the model alone would suggest.
What this rating means for you
Cardano has a funded roadmap but no post-quantum signature protecting funds on mainnet yet. Until it ships, your exposure is the ordinary one, and the steps that reduce it cost nothing.
Editorial guidance from the Hardy Index. Nothing on this profile is sponsored and nothing on it is an affiliate link. The guides carry disclosed affiliate links, which never affect a rating. How we make money.
No. Cardano uses Ed25519 signatures and an elliptic-curve verifiable random function for slot-leader election, and a sufficiently large quantum computer breaks both. Cardano has a funded research programme aimed at replacing those primitives but nothing post-quantum is live on mainnet.
It makes post-quantum security one of three strategic pillars alongside user-centric design and scalable architecture. The work is described as bottom-up: build quantum-secure replacements for Cardano's core primitives, including the signatures and key-evolving signatures that protect proof-of-stake security, then prove the resulting protocol secure end to end and publish a migration strategy.
Because Cardano's proof-of-stake security depends on the verifiable random function that elects slot leaders, not only on transaction signatures. If that VRF is built on elliptic curves, a quantum adversary could predict or manipulate leader election even if transaction signatures were already post-quantum. Deliverable D1.2 is designing a novel post-quantum VRF for exactly this reason.
Not yet. The programme's first deliverable is an assessment of state-of-the-art post-quantum building blocks, which means the selection is still open. That is the main reason Cardano scores 5 rather than higher on NIST alignment in this index: it has not committed to a standardised scheme.
This is a security-readiness assessment, not investment advice.