Post-quantum account
Register an ML-DSA-44 key (NIST FIPS 204) for your account. From then on, every action your wallet signs (withdrawals, transfers, FCTR sends, vault creation and closing, approving a session key) needs both your wallet's ECDSA signature and the post-quantum one, over the same message. A quantum computer that one day breaks ECDSA still couldn't move your money. How it works.
What this protects, and what it doesn't (yet)
Protected: everything your wallet signs. Both signatures cover the same EIP-712 message, and the chain itself refuses a protected account's wallet action that arrives without the post-quantum one.
Session keys still sign trades with ECDSA. They can trade and move money between you and a vault, never withdraw. Every session key of a protected account was approved with both signatures, and every session key expires: the chain itself refuses it after its time (at most 180 days; the app uses 7).
Connections to functorfund.com and the test node already use post-quantum key exchange (X25519MLKEM768) in current browsers.
Connect a wallet
Use any browser wallet, or the demo wallet the Trade page creates. Testnet only: mock funds.
…
- Signatures required
- —
- Registered since
- —
- Key fingerprint
- —
- Key in this browser
- —
Protect this account
Read this first. There is no way back to ECDSA-only, by design: a quantum attacker would use it. If you lose both the key in this browser and its backup file (or forget the passphrase), money can no longer leave this account. Registering also revokes your session keys; enabling trading again then needs both signatures.
- Choose a passphrase (12 characters or more). It encrypts the key in this browser and in the backup file; it is never stored or sent.
- Download the encrypted backup and keep it somewhere safe.
- Register: your wallet signs once, and the new key signs the same message to prove you hold it.
Manage your key
Your wallet actions ask for the passphrase once per tab, then sign with the key in memory.
Rotate to a new key
Signed by your wallet and your current key; the new key proves itself too. The old key stops working in the same block.
Import your key backup
This account is protected, and its key isn't in this browser. Import the backup file you saved when you registered (or rotated) it.
Session keys
The keys that trade for this account without a wallet popup. They can never withdraw or send funds, and each one expires (the app approves them for 7 days). Revoke one at once if a device is lost.
Loading…