• 7 mins read
  • Published

Strongpoint Targets Crypto Agility in Post-Quantum Custody

Daisy Shearer Physics and quantum technology editor Science.Report

Post by Daisy Shearer

Strongpoint Targets Crypto Agility in Post-Quantum Custody Science.Report © science.report
Strongpoint Targets Crypto Agility in Post-Quantum Custody © science.report

Project Eleven has introduced Strongpoint with the Zcash Foundation as an initial development partner, aiming to separate institutional custody controls from the signature schemes used by changing blockchain networks.

Project Eleven has introduced Strongpoint to address a problem that could outlast any single post-quantum signature standard: institutions may need to manage digital assets while the blockchains beneath them migrate at different speeds and choose different cryptographic designs.

  • A fragmented migration. The company's review of the 20 largest Layer 1 blockchain networks by market capitalization found that only 10 have published technical proposals, roadmaps or implementation paths for post-quantum migration. Those plans span at least six distinct post-quantum signature schemes. The result is not one upgrade timetable but a set of partially defined routes that custody providers must be prepared to support.

    The scientific rationale for this planning is established but does not imply that a cryptographically relevant quantum computer already exists. Shor's algorithm could, on a sufficiently capable fault-tolerant quantum computer, threaten public-key systems based on integer factoring or discrete logarithms. Grover's algorithm offers a more limited quadratic speedup against exhaustive search, meaning that symmetric cryptography can generally respond through suitable security margins rather than the wholesale replacement of its mathematical foundation. Reviews in Nature and research programs at MIT have helped distinguish these different threat models from near-term claims about quantum capability.

    Strongpoint is designed as a crypto-agile control layer. Its key-management, transaction-approval and audit workflows are intended to remain separate from the underlying signature schemes so that institutions can adapt when a network changes its cryptographic primitives. That architecture targets coordination and operational continuity rather than claiming to solve the migration problem inside the blockchains themselves.

  • What Strongpoint controls. The platform is aimed at institutional custody, where the central requirement is control over how keys are managed, how transactions receive approval and how activity is recorded for audit. Project Eleven says Strongpoint will allow those processes to evolve without tying every workflow to one cryptographic primitive. The announcement provides no performance measurements, security certification or evidence of production operation.

    The Zcash Foundation is joining as an initial development partner. Its contribution is described in terms of privacy-preserving cryptography, shielded transactions, zero-knowledge proofs and key management. The foundation has framed the work as an effort to shape institutional custody architecture that respects Zcash's existing privacy model while remaining adaptable to future cryptographic standards. The available description does not specify which components have been implemented or how they have been evaluated.

    Reports associated with the launch estimate that more than $1 trillion in digital assets could be exposed if sufficiently powerful quantum computers eventually compromise vulnerable public-key systems. That figure is an industry estimate, and the published material does not provide a calculation methodology, asset-by-asset inventory or uncertainty interval. It should therefore be treated as an indication of the potential scale of the planning problem rather than as a measured forecast.

    The need for an abstraction layer is familiar across post-quantum planning. A related migration report described a different effort focused on enterprise cryptographic inventories, policy checks, certificate issuance and remediation workflows. Strongpoint's stated focus is narrower and more operationally tied to digital-asset custody.

    Transition guidance associated with NIST proposes retiring modern public-key algorithms vulnerable to quantum attacks at the 112-bit security level after 2030 and prohibiting their use after 2035 for U.S. federal agencies and suppliers. The timetable is a policy framework for that environment, not a universal legal deadline for every blockchain or custodian. Nevertheless, it illustrates why inventories, replaceable cryptographic components and long-lived audit records are becoming part of institutional risk management. NIST maintains post-quantum guidance for the broader standardization and transition effort.

  • Development behind the launch. Project Eleven is targeting production deployment for Strongpoint in Q4 2026. Independent reporting indicates that the platform was being tested by a closed group of partners at launch, with industrial deployment planned for that quarter. There is no confirmation in the available material of an actual production launch, broad public availability or completed certification. The announcement provides no customer list, deployment data or independent assessment of the proposed control layer.

    The commercial rollout follows two corporate developments. Project Eleven completed a $20 million Series A financing in January 2026 and acquired Riva Labs in September 2026. The acquisition is intended to bring post-quantum multi-party computation and automated cryptanalysis into Project Eleven's enterprise product suite.

    These investments give the company a stated technical and financial base for the rollout, but they do not establish that the underlying migration landscape has converged. Nor do they show that institutions can move between signature schemes without additional integration work at the network or custody boundary.

  • The unresolved test. Strongpoint's value will depend on details that are not yet public: how it isolates scheme-specific dependencies, how it validates transaction approvals and how its audit records behave when networks change their cryptographic rules. The same scrutiny should apply to its post-quantum MPC and automated-cryptanalysis capabilities. No figures for throughput, latency, key-recovery performance or failure rates are provided in the announcement.

    Technical evaluation should also distinguish a custody control plane from the cryptographic security of the assets themselves. A platform may preserve approval policies and audit trails while a blockchain still depends on a signature algorithm that requires a separate protocol upgrade. Research institutions including Stanford and CERN illustrate, in different fields, the importance of independently testing systems at both the component and system levels; for Strongpoint, that would mean examining implementation security, recovery procedures, interoperability and governance rather than relying only on architectural descriptions.

    The core commercial proposition is therefore clear but incomplete. Project Eleven is offering a way to organize institutional controls around changing cryptography while the market remains divided across multiple migration paths. The decisive evidence will come from production deployment and technical evaluation rather than from the launch itself. A crypto-agile layer can reduce the cost of change only if it preserves security and operational control across the transitions it is built to manage.

    Crypto agility means that key-management and approval workflows can adapt when the cryptographic scheme underneath them changes; it does not make a blockchain post-quantum by itself. Strongpoint is best understood at this stage as a planned institutional architecture for a fragmented migration, and that makes its Q4 2026 deployment target the meaningful test of whether the concept works beyond announcement language.

  • Related articles