PQLN: Post-Quantum Security for the Bitcoin Lightning Network's Off-Chain Surfaces

Ahmet Kurt from East Texas A&M University has announced a significant advancement in the field of cryptocurrency networks with the development of PQLN, a post-quantum extension of the Lightning Network. This new project, which integrates hybrid post-quantum cryptographic mechanisms into Lightning's framework, is notably the first of its kind to be implemented and tested on real nodes. The implementation has been crafted using Rust, with the specific additions encompassing approximately 11,000 lines of code. This innovation aims to fortify all off-chain surfaces of the Lightning Network against potential quantum-computer attacks by securing BOLTs 4, 7, 8, 11, and 12—key components that handle various operations such as gossip, transport, invoices, offers, and payment routing.

The implementation details reveal that while traditional elements like channel announcements remain unchanged due to their partial reliance on Bitcoin's infrastructure, other aspects have been significantly restructured. For instance, the Noise_XK handshake used in transport now includes a hybrid mechanism for enhanced security. Invoices and offers have also been adapted to handle larger, more secure signatures and keys necessitated by post-quantum standards. Despite these enhancements, some challenges such as increased data sizes and bandwidth requirements have emerged. The PQLN nodes, for example, experience approximately tenfold increases in data download and storage needs compared to standard nodes.

In terms of network interoperability, tests indicate that PQLN maintains effective communication with both upgraded and non-upgraded nodes, ensuring that transactions are completed securely regardless of the counterparty’s software version. However, open issues such as the need for wider propagation of PQ updates across the network and constraints imposed by current relay settings in rust-lightning still require resolution. These challenges highlight ongoing areas for further research and development within the community. The full details of this project, along with the source code, have been made publicly available, with the academic paper hosted on arXiv and the implementation code accessible through GitHub repositories for pq-rust-lightning and pq-ldk-sample.