The cryptocurrency space has long been fixated on achieving faster transaction times, lower fees, and greater scalability. However, a more pressing concern has emerged: the potential vulnerability of its core security to quantum computing. Quantum computers, which process information using quantum physics principles, may eventually be capable of solving the complex mathematical problems that underpin modern encryption. Recent research from Google and academic collaborators has intensified discussions around post-quantum cryptography, particularly after it was suggested that such systems could potentially break widely used encryption in a matter of minutes.

Solana is working with cryptography firm Project Eleven to experiment with post-quantum security, which is designed to withstand quantum attacks that could render current cryptography obsolete. However, early testing has revealed a significant tradeoff: making Solana quantum-safe may compromise its performance. The new, quantum-safe digital signatures that authorize transactions are substantially larger and heavier than those used today, resulting in the network being able to handle fewer transactions simultaneously.

In testing, a version of Solana using this new cryptography ran approximately 90% slower than it does currently. This tradeoff directly impacts the heart of Solana's design, which has built its reputation on high throughput and low latency. Unlike Bitcoin and Ethereum, Solana exposes public keys directly, making it more vulnerable in a quantum scenario. To address this, some developers are exploring simpler, more immediate solutions, such as 'Winternitz Vaults', which utilize a different type of cryptography believed to be safer against quantum attacks.

Despite the challenges, Solana has made significant strides in experimentation, with a testnet featuring post-quantum signatures already in place. The broader industry, however, still faces a significant challenge: coordinating the upgrade of cryptography across developers, validators, applications, and users.

The risk of delaying this process is that the industry may wait too long, only to find itself facing a major problem that requires years to fix.