East Texas A&M Unveils PQLN Post-Quantum Security for Bitcoin (BTC) Lightning, Passing 12 Node Tests

PQLN Runs on rust-lightning

A quantum-resistant security layer for the Bitcoin (BTC) Lightning Network now exists as running research code. On October 13, a team at East Texas A&M University published results for PQLN, a post-quantum cryptography design built for Lightning's off-chain surfaces, implemented in rust-lightning, one of the network's main software implementations, and verified against Lightning nodes in a laboratory environment. This is not a network release: PQLN stays at the research stage, and no formal adoption on Lightning has been decided.

The work is documented in a paper dated September 12, “PQLN: Post-Quantum Security for the Bitcoin Lightning Network’s Off-Chain Surfaces,” and its source code is public. As far as the team is aware, no prior effort has carried post-quantum cryptography for Lightning from design through implementation to evaluation.

PQLN rests on two algorithms the US National Institute of Standards and Technology standardized in August 2024: ML-DSA, a signature scheme, and ML-KEM, a key-encapsulation mechanism. The design does not discard current cryptography; it combines the new algorithms with existing ones and applies them to three specific surfaces: communication between nodes, authentication of payment invoices, and shielding of routing information. What those surfaces belong to: Lightning settles transfers off the base chain. Users open payment channels by depositing Bitcoin (BTC), process transfers without recording each one on-chain, and reach counterparts they hold no direct channel with through multi-hop routing. Channels carry native BTC, not a wrapped Bitcoin claim. That instant-settlement profile is why the network keeps appearing in PayFi discussions. PQLN deliberately leaves Bitcoin's own consensus untouched, including its proof of work base layer; the team's argument is that the base chain and the off-chain stack need separate quantum countermeasures. The university describes verified operation and compatibility, not a deployed upgrade, and node operators have nothing to migrate to yet.

Off-Chain Surfaces at Risk

The network has needed protocol surgery before: Lightning became practical once the 2017 Segregated Witness upgrade removed the transaction malleability that off-chain channels require. Its current exposure is different. Node-to-node messaging and payment authentication on Lightning rest on elliptic-curve public-key cryptography. If a sufficiently capable quantum computer is ever built, that cryptography fails, and an attacker could impersonate nodes or forge payment data. A second scenario requires no future machine at all: record today's encrypted channel traffic and decrypt it once quantum hardware matures. The team adds that even a quantum-safe Bitcoin (BTC) base layer would not cover Lightning's own messaging and settlement plumbing. Funds locked inside channels are managed by ordinary Bitcoin transactions and fall outside PQLN's scope entirely.

Backward compatibility is part of the design. A PQLN node keeps transacting with nodes that lack it, though traffic to and through unprotected nodes receives no quantum-resistant protection. Operators set the policy themselves: permit legacy connections, or refuse any connection and payment that lacks post-quantum protection.

The measured costs split cleanly. Performance was evaluated on rust-lightning nodes in the lab: the slowest added cryptographic operation, signature generation, averaged about 0.33 milliseconds. Compatibility was checked across 12 scenarios pairing PQLN-capable nodes with conventional ones, and every test passed. Bandwidth, not compute, carries the burden: fetching network information grew to roughly 10 times its previous size with the standard signatures, or about 4 times with smaller ones, and the researchers call that data growth the main operational strain. Three boundaries apply. Verification covered rust-lightning alone, so compatibility with other Lightning software is unconfirmed. The extension specification remains experimental. Formal adoption would require further validation and completed technical specifications, none of which exists today. In that sense the milestone is engineering, not deployment: the network itself runs exactly as it did before October 13.

From Design to Running Code

Our reading: the value here is that a contested risk now has a measurable artifact. The quantum question around Bitcoin has mostly lived as argument, from projections of cryptographically relevant machines to public dismissals, including the recent Edwards-Saylor exchange. None of this touches the Bitcoin price directly, and the market's own drivers ran separately: the $82,000 reclaim after an overnight test of $80,000, and Bitcoin volatility at 43% by Grayscale's measure, inside the S&P 500's range. But the engineering floor has moved. What runs now that did not run before: a rust-lightning node carrying ML-DSA signatures and ML-KEM key exchange, interoperating with legacy peers across 12 tested scenarios. Bitcoin research on quantum resistance now includes working, publicly reviewable code.