The code change enables ML-DSA-65 in devnet protocol version 139, both for standalone signatures and as a member of a multisignature account. “Native” means the signature is checked through Sui’s account-authentication machinery, rather than only inside an application contract.
ML-DSA is a lattice-based digital-signature algorithm standardized by the U.S. National Institute of Standards and Technology. NIST describes it as believed to remain secure against an adversary with a large-scale quantum computer.
Mainnet Target Is Q1 2027
The Sui Foundation’s Aug. 6 roadmap targets native ML-DSA-65 accounts on testnet by the end of 2026 and native account authentication on mainnet in the first quarter of 2027. It says wallet, software-development-kit and command-line support will arrive alongside the rollout, with timing subject to independent audits and testnet feedback.
The planned account upgrade is opt-in. The foundation says users will be able to derive post-quantum keys from their existing recovery phrases and use address aliases to change authorization keys without moving assets or changing their address. Sui’s alias documentation describes how an address can replace the set of keys allowed to sign for it.
That native-account schedule is separate from Sui’s planned quantum-safe vaults, which use the hash-based SLH-DSA-SHA2-128s scheme inside Move smart contracts. The foundation targets those vaults for mainnet in 2026, while describing the broader rollout as work in progress rather than a finished, fully audited release.
