Project Eleven introduced a post-quantum cryptographic proof technique designed to help Bitcoin users verify wallet ownership after quantum computers become powerful enough to break current encryption. The solution uses a wallet's key derivation path to prove control of a parent key without revealing it — something a quantum attacker cannot replicate even after compromising a wallet's private key. The technique addresses a fundamental challenge in Bitcoin's security model: when quantum computers can derive private keys from public keys, digital signatures stop being reliable proof of ownership, making it impossible to distinguish legitimate owners from attackers.
Project Eleven Uses Key Derivation Path for Post-Quantum Proof
Project Eleven CEO Alex Pruden explained in a thread on X that digital signatures stop being reliable once quantum computers can derive private keys from public keys. At that point, both a legitimate owner and a quantum attacker can produce identical signatures, making ownership indistinguishable from forgery.
"After Q-Day, once a quantum computer can derive an ECC private key from its public key, a valid signature no longer proves ownership," Pruden wrote. "Both the quantum adversary and the legitimate owner are able to produce identical signatures."
The solution shifts proof of ownership away from signatures entirely. Instead of relying on a private key, the technique uses a wallet's key derivation path to prove the user controls the parent key from which the wallet's private key was originally generated, without revealing that parent key. A quantum computer may be able to derive a wallet's private key from its public key, but it cannot work backwards to reconstruct the seed phrase or parent key sitting higher up in the derivation hierarchy.
"So even after Q-Day, an attacker who's broken your address's private key does not hold, and can't compute, the seed phrase it was derived from," Pruden wrote. "Proving you know that parent key, without revealing it, is something only the real owner can do."
Jim Posen, lead maintainer of the open-source Binius zero-knowledge proof system, built the implementation with funding from Project Eleven. The work builds on "signature lifting," a technique first proposed by researchers Alon Sattath and Robert Wyborski. The prototype is currently unaudited and would require blockchain protocol-level support before deployment.
Q-Day Threatens Bitcoin's Elliptic Curve Cryptography
Q-Day represents the point at which a sufficiently powerful quantum computer can break elliptic curve cryptography fast enough to target active Bitcoin wallets. When a wallet's public key has been exposed on-chain through a previous transaction, it becomes readable by anyone, including a future quantum adversary. With enough computational power, that public key is sufficient to derive the corresponding private key.
The compromise destroys the evidentiary value of digital signatures altogether. If anyone with a quantum computer can generate a valid signature for any wallet, courts, protocols, and recovery mechanisms can no longer treat signature validity as proof of identity.
Derivation-Based Proof Targets Users Who Miss Migration Window
The recovery method is designed for users who miss a future migration window to quantum-safe addresses. Coinbase's quantum advisory council warned that roughly 7 million Bitcoin could eventually be vulnerable if owners fail to migrate in time.
For those users, Project Eleven's approach offers a fallback: prove ownership through the derivation path, not through a signature that a quantum machine could also produce. The mechanism provides a cryptographic basis for distinguishing the real owner from the attacker.
"As much as I'd love for the entire world to take a quantum migration plan seriously, the reality is that some digital asset wallets will miss the window," Pruden wrote. "This gives them a fallback: prove ownership through derivation, not signature, even after that window closes."
Bitcoin Developers Advance BIP-360 and Quantum-Resistant Upgrades
In February, Bitcoin developers advanced BIP-360 — a Bitcoin Improvement Proposal laying the groundwork for quantum-resistant upgrades — into formal review. In March, BTQ Technologies released the first working implementation on its Bitcoin Quantum testnet, allowing developers to test the proposal.
In June, President Donald Trump signed executive orders accelerating the federal government's transition to post-quantum cryptography. Coinbase's quantum advisory council issued a warning around the same time, urging blockchain developers to begin planning post-quantum migrations immediately.
FAQ
What is Q-Day in the context of Bitcoin security?
Q-Day is the moment when a quantum computer can break the elliptic curve cryptography that secures Bitcoin transactions, making it possible for attackers to derive private keys from public keys.
How does Project Eleven's proof help Bitcoin users after Q-Day?
It uses a wallet's key derivation path to prove ownership of the parent key without revealing it. Because a quantum computer cannot reconstruct that parent key from a compromised private key, this method allows legitimate owners to prove control even after their wallet's private key has been exposed.
Is Project Eleven's recovery method ready for blockchain use?
No. The prototype is currently unaudited and requires blockchain protocol-level support before it can be used operationally. It is a proof of concept demonstrating technical feasibility, not a deployable solution.
