devcon8 / post quantum accounts today benchmarking falcon 512 verification inside starknets validate
- YouTube
- Details
Post-Quantum Accounts Today: Benchmarking Falcon-512 Verification Inside Starknet's `__validate__`
Duration: NaN:NaN:NaN
Speaker: Vijay Singh
Type: Talk
Expertise: Some familiarity with the topic
Event: Devcon
Date: Nov 2026
Account abstraction turns post-quantum migration from a protocol upgrade into a contract swap: replace the signature check inside `__validate__` and a quantum-safe account can ship today — if verification fits the validation limits (1M steps, 100M L2 gas).
We measured what that actually costs. Falcon-512 (FN-DSA) verification in Cairo lands at 26–64% of the gas cap depending on the hash-to-point: standards-compliant SHAKE-256 at ~64% (with a pure-Cairo `Keccak-f[1600]`), non-standard Poseidon and BLAKE2s variants at ~26–31%. We'll cover the engineering that makes this fit, a lazy-reduction NTT over felt252 with the final reduction folded into the divisibility check, hint-based vs. direct verification (calldata vs. compute tradeoff), and storing the public key in the NTT domain, plus the security implications of each shortcut, and what a native keccak syscall (SNIP-32) would change. All numbers are reproducible from an open-source benchmark suite with deployable SNIP-6 accounts.
Categories