Assentian-PQE (SNTI) Whitepaper

One of the First Mineable Post-Quantum Cryptocurrencies | v1.0 | June 2026

For Sentia & Bebeb πŸ’™

Assentian-PQE (SNTI)

One of the First Mineable Post-Quantum Cryptocurrencies

Whitepaper v1.2 | Updated 28 July 2026


"The question is not whether quantum computers will break existing cryptography. The question is whether the world will be ready when they do." β€” NIST Post-Quantum Cryptography Team, 2024


Table of Contents

  1. Executive Summary
  2. Investment Thesis
  3. The Quantum Threat
  4. Why XMSS
  5. Competitive Landscape
  6. Architecture
  7. Proof-of-Useful-Work
  8. Security Model
  9. Tokenomics
  10. Roadmap
  11. Technical Specifications
  12. Blockchain Scalability & The XMSS Size Trade-off
  13. Risk Analysis
  14. Team & Governance
  15. Conclusion

1. Executive Summary

Assentian-PQE (SNTI) is one of the first mineable post-quantum cryptocurrencies, and an early production example of proof-of-work mining built directly around NIST-standardized signatures β€” a fully operational blockchain that replaces classical ECDSA signatures with XMSS (eXtended Merkle Signature Scheme), the signature standard mandated by NIST SP 800-208.

Unlike theoretical proposals or migration promises, Assentian-PQE is already running:

The quantum era is not coming. For Assentian-PQE, it has already begun.

Property Detail
Ticker SNTI
Consensus Proof-of-Useful-Work (PoUW) via XMSS
Signature Scheme XMSS-SHA2_10_256 (NIST SP 800-208)
Block Time 60 seconds
Max Supply 210,000,000 SNTI
Halving Interval Every 2,100,000 blocks (~4 years)
Genesis Date June 26, 2026
Codebase Bitcoin Core fork (C++)
License BSL-1.1 β†’ GPL-2.0 (2030)
Magic Bytes SNTI (0x53, 0x4E, 0x54, 0x49)
Contact admin@assentian.network

2. Investment Thesis

2.1 The Core Proposition

Assentian-PQE is positioned at the intersection of three converging forces:

Force 1: The Quantum Threat is Real NIST has finalized post-quantum cryptography standards (FIPS 203, 204, 205, SP 800-208). The US federal government mandates PQC migration by 2030. This is not speculation β€” it is policy.

Force 2: Existing Blockchains Are Vulnerable Bitcoin, Ethereum, Solana β€” every major blockchain uses ECDSA or Ed25519. Both are broken by Shor's algorithm on a sufficiently powerful quantum computer. Migration is technically complex, politically contentious, and economically disruptive.

Force 3: First-Mover Advantage is Unclaimed No working, mineable, NIST-compliant post-quantum blockchain exists today. Assentian-PQE claims that position on June 26, 2026.

2.2 Why Now

2024: NIST finalizes PQC standards

2025: Enterprise PQC migration begins

2026: SNTI mainnet launches ◄── WE ARE HERE

2027: "Harvest now, decrypt later" attacks surface publicly

2028: First cryptographically relevant quantum computer (IBM/Google estimates)

2029: NIST mandates PQC for all federal systems

2030: Mass migration begins β€” SNTI is already there

2.3 Total Addressable Market

Market Size (2026) SNTI Relevance
Cryptocurrency market cap ~$3.5 trillion Direct β€” quantum-safe store of value
PQC security market ~$400M β†’ $7B by 2030 Direct β€” XMSS mining as useful work
Enterprise blockchain ~$12B Indirect β€” PQC infrastructure
Government IT security ~$80B Indirect β€” regulatory tailwind

Conservative scenario: If SNTI captures 0.1% of crypto market cap at quantum inflection point β†’ $3.5B market cap.


3. The Quantum Threat

3.1 What Breaks

Current blockchain cryptography relies on two mathematical problems:

ECDSA / Ed25519 (used by Bitcoin, Ethereum, Solana): - Security assumption: Discrete logarithm problem is hard - Broken by: Shor's algorithm on quantum computer - Timeline to break 256-bit ECDSA: ~4,000 logical qubits

SHA-256 (used in Bitcoin PoW): - Security assumption: Preimage resistance - Weakened by: Grover's algorithm (reduces to 128-bit effective security) - Timeline to meaningfully weaken: ~10,000+ logical qubits

3.2 The Timeline

Year Event Implication
2019 Google achieves quantum supremacy (53 qubits) Proof of concept
2023 IBM reaches 1,000+ qubit processor Engineering milestone
2024 NIST finalizes PQC standards Policy signal
2025 Microsoft, Google, IBM racing to error correction Commercial viability
2026–2028 Cryptographically relevant QC estimated ECDSA at risk
2029 NIST PQC mandate for US federal systems Regulatory force
2030+ Mass PQC migration SNTI first-mover advantage

3.3 "Harvest Now, Decrypt Later"

The most immediate threat is not breaking encryption in real-time β€” it is retroactive decryption. Nation-state actors are harvesting encrypted blockchain transactions today, storing them for future decryption when quantum computers become powerful enough.

For Bitcoin holders: every transaction you have ever made is permanently recorded on a public ledger, and every signature will eventually be forgeable.

Assentian-PQE addresses this by making XMSS the exclusive signature scheme used by every wallet, address, and mining reward from block zero β€” no transaction on the network has ever used a classical signature.

3.4 The $2.8 Trillion Problem

Bitcoin alone holds approximately $2.8 trillion in value (peak 2024). All of it is protected by ECDSA. When quantum computers break ECDSA:

Assentian-PQE is immune to this attack from genesis.


4. Why XMSS

4.1 The NIST Selection

NIST spent 8 years (2016–2024) evaluating post-quantum cryptographic algorithms. The result:

Assentian-PQE chose XMSS from SP 800-208 β€” the only standard specifically designed for high-security, long-term applications where key state can be managed.

4.2 XMSS vs Other PQC Schemes

Scheme Standard Quantum-Safe Key Size Sig Size Security Assumption SNTI Choice
XMSS NIST SP 800-208 βœ… Yes 64 B 2,500 B Hash only βœ… Selected
SPHINCS+ NIST FIPS 205 βœ… Yes 32 B 8,000 B Hash only Too large
FALCON NIST FIPS 206 βœ… Yes 897 B 666 B Lattice Lattice risk
CRYSTALS-Dilithium NIST FIPS 204 βœ… Yes 1,312 B 2,420 B Lattice Lattice risk
LMS NIST SP 800-208 βœ… Yes 64 B ~4,000 B Hash only Less efficient
ECDSA None (broken) ❌ No 33 B 72 B Discrete log Bitcoin/ETH use this

Why XMSS wins for SNTI:

  1. Hash-only security: No new mathematical assumptions. Security relies entirely on SHA-256, which has 50+ years of analysis.
  2. Smallest quantum-safe public key: 64 bytes β€” enabling efficient on-chain storage.
  3. NIST-approved: Regulatory compliance from day one.
  4. Production-proven: Used in real deployments (IETF RFC 8391).
  5. Stateful advantage: Key state enables efficient verification and mining integration.

4.3 The Innovation: Proof-of-Useful-Work

Traditional Proof-of-Work produces nothing of value: Traditional Mining:

Electricity β†’ SHA-256 hashing β†’ Heat + COβ‚‚ + Block reward

(The hashes are thrown away. They have no use outside mining.) Assentian-PQE Proof-of-Useful-Work produces real cryptographic infrastructure: SNTI Mining:

Electricity β†’ XMSS key generation β†’ Quantum-safe signatures β†’ Block reward

(The XMSS operations actively secure the network against quantum attacks.) Every block mined on Assentian-PQE contributes a verified XMSS key pair and signature to the blockchain's security infrastructure. Mining IS security.


5. Competitive Landscape

5.1 The Honest Picture

Assentian-PQE acknowledges the work that came before it. We do not exist in a vacuum.

QRL (Quantum Resistant Ledger)

Aspect QRL SNTI
Launch June 2018 June 2026
Consensus Proof of Stake Proof-of-Useful-Work
Signature XMSS-SHA2_10_256 XMSS-SHA2_10_256
Mineable ❌ No βœ… Yes
Bitcoin Core base ❌ No βœ… Yes
Useful work ❌ No βœ… Yes
DeFi roadmap Limited Full

QRL proved XMSS works in production blockchain. SNTI adds mining, useful work, and a Bitcoin Core foundation.

IOTA

IOTA uses Winternitz OTS (a simpler hash-based scheme) in a DAG architecture. Not mineable, not NIST-standardized, different security model. Not a direct competitor.

Bitcoin / Ethereum PQC Migration

The most common question: "What if Bitcoin just migrates to PQC?"

The honest answer: Bitcoin migration is not technically straightforward. It requires: - Consensus among thousands of node operators - Migration of ~4 million exposed addresses - Hard fork coordination across exchanges, wallets, miners - 5–10 year transition period minimum

Ethereum faces similar challenges. Even optimistic timelines suggest 2030+ for completion.

By the time Bitcoin completes PQC migration, SNTI will have 4+ years of battle-tested operation.

5.2 Competitive Position

POST-QUANTUM BLOCKCHAIN LANDSCAPE (2026)

Theoretical ◄──────────────────────────────────────────► Operational

MatRiCT+ SPHINCS+ Dilithium- IOTA QRL SNTI β˜… (paper) (theory) Ethereum (DAG, (PoS, (PoUW, (EIP draft) W-OTS) XMSS) mineable, BTC Core, LIVE)

◄── Not mineable ──────────────────────────────────── Mineable ──► ◄── Single purpose ────────────────────────────── Full ecosystem ─► ◄── Unproven ──────────────────────────────────── Production ──►

5.3 Feature Matrix

Feature Bitcoin Ethereum QRL SNTI
Quantum-safe signatures ❌ ECDSA ❌ ECDSA βœ… XMSS βœ… XMSS
NIST-standardized N/A N/A βœ… SP 800-208 βœ… SP 800-208
Mineable βœ… PoW ❌ PoS ❌ PoS βœ… PoUW
Useful mining work ❌ ❌ ❌ βœ…
Bitcoin Core base βœ… ❌ ❌ βœ…
Live mainnet (2026) βœ… βœ… βœ… βœ…
No pre-mine βœ… ❌ βœ… βœ…
Fair launch βœ… ❌ βœ… βœ…
DeFi ecosystem βœ… βœ… ❌ βœ… Planned

6. Architecture

6.1 System Overview

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”

β”‚ ASSENTIAN-PQE NETWORK β”‚

β”‚ β”‚

β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚

β”‚ β”‚ Miner │───▢│ Stratum Pool │───▢│ Full Node β”‚ β”‚

β”‚ β”‚(CPU/GPU) β”‚ β”‚ (Wave 2) β”‚ β”‚ (bitcoind) β”‚ β”‚

β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚

β”‚ β”‚ β”‚ β”‚

β”‚ β–Ό β–Ό β”‚

β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚

β”‚ β”‚ XMSS Key β”‚ β”‚ Block β”‚ β”‚

β”‚ β”‚ Gen+Sign β”‚ β”‚ Explorer β”‚ β”‚

β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚

β”‚ β”‚

β”‚ β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β” β”‚

β”‚ β”‚ Blockchain Layer β”‚ β”‚

β”‚ β”‚ Bitcoin Core 27.0 β€’ UTXO β€’ SegWit β€’ P2WPKH β”‚ β”‚

β”‚ β”‚ XMSS-SHA2_10_256 β€’ PoUW β€’ Sighash-v2 β”‚ β”‚

β”‚ β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜ β”‚

β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

6.2 Block Structure

β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”

β”‚ SNTI BLOCK β”‚

β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€

β”‚ Block Header (80 bytes) β”‚

β”‚ β”œβ”€β”€ nVersion (4 bytes) β”‚

β”‚ β”œβ”€β”€ hashPrevBlock (32 bytes) β”‚

β”‚ β”œβ”€β”€ hashMerkleRoot (32 bytes) β”‚

β”‚ β”œβ”€β”€ nTime (4 bytes) β”‚

β”‚ β”œβ”€β”€ nBits (4 bytes) β”‚

β”‚ └── nNonce (4 bytes) β”‚

β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€

β”‚ Coinbase Transaction β”‚

β”‚ β”œβ”€β”€ vout[0]: Mining reward (SNTI) β”‚

β”‚ β”œβ”€β”€ vout[1]: Witness commitment β”‚

β”‚ β”œβ”€β”€ vout[2]: XMSS pubkey (64 bytes) β”‚

β”‚ └── vout[3]: XMSS signature (2,500B) β”‚

β”œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€

β”‚ Transactions (standard UTXO) β”‚

β”‚ └── XMSS-signed inputs β”‚

β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

6.3 Key Security Features

Sighash-v2 (Cross-Index Attack Prevention)

Assentian-PQE implements a hardened sighash scheme:

7. Proof-of-Useful-Work

7.1 PoUW v2 β€” Pure XMSS Tree Building (Live since Jun 24, 2026)

SHA-256 nonce search has been completely removed. Building the XMSS Merkle tree IS the proof of work.

How PoUW v2 Works

Step 1: Miner generates random SK_SEED (96 bytes) β€” this is the "nonce"

Step 2: Miner builds full XMSS tree (height=10, 1024 leaves) - Uses xmssmt_core_seed_keypair(SK_SEED) β€” deterministic tree build - Cost: ~6 seconds per attempt on Intel Xeon @ 2.5GHz - Output: xmssRoot = Merkle root hash (32 bytes)

Step 3: Check if xmssRoot < target - YES β†’ valid block! Sign and submit - NO β†’ increment SK_SEED, rebuild tree

Step 4: Sign block preimage with WOTS+ (leaf 0) - preimage = SHA256(nVersion || hashPrevBlock || nTime || nBits) - Embed PoUWv2Proof in coinbase OP_RETURN (2,660 bytes total)

Step 5: Submit block β€” node verifies: - block.xmssRoot < target (PoW check) - PoUWv2Proof.Deserialize() β€” extract proof components - CheckPoUWv2() β€” verify root matches proof

Why This IS "Useful Work"

Every mining attempt produces a complete XMSS keypair with 1024 one-time signatures β€” directly useful post-quantum cryptographic material. Unlike SHA-256 which produces nothing of value, XMSS tree building:

Difficulty & Performance

Parameter Value
Tree height 10 (1024 leaves)
Build time (1 core) ~6.17 seconds
Target attempts/block 156 (4 cores Γ— 39/core)
Difficulty algorithm EMA per-block (Ξ±=0.1)
powLimit 2²⁡⁢ / 156
Target block time 60 seconds
Genesis nBits 0x2001a41a

PoUW v2 Proof Format (coinbase OP_RETURN, 2,660 bytes)

Field Size Description
Magic 4 bytes PW2\x02
SK_SEED 96 bytes SK_SEED + SK_PRF + PUB_SEED
xmss_pk 64 bytes root + PUB_SEED
auth_path 320 bytes 10 Γ— 32 bytes node hashes
wots_sig 2144 bytes WOTS+ signature
r 32 bytes signature randomness

8. Security Model

8.1 Threat Model

Threat Classical Quantum SNTI Defense
Signature forgery Infeasible (ECDSA) Trivial (Shor's) XMSS: hash-based, quantum-safe
Key recovery Infeasible Trivial XMSS: no private key exposure
51% attack Expensive Same cost PoUW: requires XMSS keygen
Replay attack Prevented by nonce Same Sighash-v2 + leaf_index
Cross-index attack N/A N/A Sighash-v2 prevents it
Key exhaustion N/A N/A Key retirement protocol
Wallet compromise Physical security Same Encryption at rest

8.2 Security Audits

Current status: - Internal security review: βœ… Complete - Sighash-v2 design review: βœ… Complete - Key retirement protocol: βœ… Implemented - External audit (Trail of Bits / Halborn): πŸ”œ Planned Q4 2026

Assentian-PQE is actively seeking funding for a professional security audit. Budget requirement: $20,000–$100,000.

8.3 Known Limitations

XMSS is stateful. Unlike ECDSA, XMSS requires tracking which leaf indices have been used. If a miner uses the same leaf index twice, the security guarantee is void (though no coins are stolen β€” it simply weakens the signature scheme).

Assentian-PQE mitigates this through: - Enforced leaf-index tracking in wallet state - Write-before-use atomic state updates - Deterministic leaf index assignment from node consensus


9. Tokenomics

9.1 Supply Schedule

Total Supply: 210,000,000 SNTI (hard cap β€” 10Γ— Bitcoin's 21M, scaled for 60s block time) Emission:

β”œβ”€β”€ Block 0–2,100,000: 50 SNTI/block (~4 years)

β”œβ”€β”€ Block 2,100,000–4,200,000: 25 SNTI/block (~4 years)

β”œβ”€β”€ Block 4,200,000–6,300,000: 12.5 SNTI/block (~4 years)

└── ... halvings continue until ~2140

9.2 Distribution

Allocation % Amount Vesting
Mining rewards 85% 17,850,000 SNTI Block by block
Development fund 10% 2,100,000 SNTI 4-year linear vest
Community & airdrop 3% 630,000 SNTI TGE + 12 months
Bug bounty / security 2% 420,000 SNTI On-demand

No pre-mine. No VC allocation. No insider rounds.

The development fund is controlled by a multisig wallet. All transactions will be publicly auditable on-chain.

9.3 Emission Schedule

Phase Blocks Reward SNTI/Day Era
Genesis 0–2,100k 50 SNTI ~105,000,000 2026–2030
Halving 1 2,100k–4,200k 25 SNTI ~52,500,000 2030–2034
Halving 2 4,200k–6,300k 12.5 SNTI ~26,250,000 2034–2038
Halving 3 6,300k–8,400k 6.25 SNTI ~13,125,000 2038–2042

9.4 Value Drivers

  1. Scarcity: Fixed 210M supply β€” same halving model as Bitcoin, scaled 10Γ— for 60s blocks
  2. Utility: Only quantum-safe mineable chain β€” unique use case
  3. Regulatory: NIST-compliant = institutional-grade
  4. Network effect: Miners β†’ hashrate β†’ security β†’ value
  5. Quantum inflection: Value accelerates as quantum threat materializes
  6. Deflationary: 50% of transaction fees burned

10. Roadmap

βœ… Phase 0: Foundation (Complete β€” June 2026)

βœ… Phase 1: Mainnet Launched β€” 26 Jun 2026

πŸ”œ Phase 2: Exchange & Wallet (Q1–Q2 2027)

πŸ”œ Phase 3: Ecosystem (Q3–Q4 2027)

πŸ”œ Phase 4: Enterprise (2028+)


11. Technical Specifications

11.1 XMSS Parameters

Parameter Value Description
Scheme XMSS-SHA2_10_256 SHA-256, tree height 10
OID 0x00000001 RFC 8391 identifier
n 32 bytes Hash output size
w 16 Winternitz parameter
h 10 Merkle tree height
Public key 64 bytes root (32B) + PUB_SEED (32B)
Signature 2,500 bytes Full XMSS signature
Sigs per key 1,024 2^10 leaf nodes
Security level 128-bit NIST Level 1

11.2 Network Parameters

Parameter Mainnet Testnet
Magic bytes SNTI (0x53,0x4E,0x54,0x49) sTST (0x73,0x54,0x53,0x54)
P2P port 9333 19333
RPC port 9332 18332
Address format bech32m (snti1…) bech32m (tsnti1…)
Bech32 HRP snti tsnti
Genesis hash b4a26aef52f6f5... 2d858f51fc4af7...
Genesis nNonce 26 1
Genesis nBits 0x2001a41a 0x207fffff
Max block size 4 MB 4 MB
Block weight limit 4,000,000 4,000,000

11.3 Sighash-v2 Specification

Standard sighash (v1):

sighash = SHA256(serialized_tx_data) Assentian-PQE sighash (v2):

sighash_v2 = SHA256(sighash_v1 || leaf_index_BE) Where:

leaf_index_BE = 4-byte big-endian XMSS leaf index Security benefit:

A signature valid at leaf index N cannot be replayed at index M.

Prevents cross-index forgery attacks on XMSS-signed transactions.

11.4 CheckPoUW Validation

Every block is validated by CheckPoUW():

bool CheckPoUW(const CBlock& block, const Consensus::Params& params) {
    // 1. Extract XMSS pubkey from coinbase vout[2]
    // 2. Extract XMSS signature from coinbase vout[3]
    // 3. Verify pubkey is exactly 64 bytes
    // 4. Verify signature is exactly 2,500 bytes
    // 5. Verify XMSS_verify(pubkey, sighash_v2, signature) == true
    // 6. Verify leaf index has not been used before
    return valid;
}


12. Blockchain Scalability & The XMSS Size Trade-off

12.1 The Honest Question

Institutional investors will ask: "XMSS signatures are 2,500 bytes. ECDSA is 72 bytes. Won't this bloat the blockchain?"

This is the right question. This section answers it directly.

12.2 The Size Reality

Signature Scheme Sig Size Pubkey Total Quantum-Safe
ECDSA (Bitcoin) 72 bytes 33 bytes ~105 bytes ❌ No
Ed25519 (Solana) 64 bytes 32 bytes ~96 bytes ❌ No
XMSS (SNTI) 2,500 bytes 64 bytes ~2,564 bytes βœ… Yes
FALCON (lattice) 666 bytes 897 bytes ~1,563 bytes βœ… Yes
SPHINCS+ 8,000 bytes 32 bytes ~8,032 bytes βœ… Yes

XMSS signatures are 34x larger than ECDSA. This is a deliberate engineering trade-off β€” not an oversight.

12.3 Current Impact: Minimal

In Assentian-PQE's current architecture, XMSS signatures appear only in the coinbase transaction (one per block). Standard user-to-user transactions use P2WPKH (standard SegWit), which is identical in size to Bitcoin transactions. Current SNTI block anatomy:

β”œβ”€β”€ Coinbase tx: ~2,800 bytes (XMSS pubkey + signature)

└── User txs: ~220 bytes each (standard SegWit β€” same as Bitcoin) Block size overhead vs Bitcoin: +2,500 bytes per block

With 4MB max block size: 0.06% overhead β€” negligible Today, SNTI block size is virtually identical to Bitcoin.

12.4 SegWit Witness Discount

XMSS signatures are stored in the witness portion of the coinbase transaction. Bitcoin's SegWit protocol applies a 75% discount to witness data weight: XMSS signature weight calculation:

Raw size: 2,500 bytes

Witness weight: 2,500 Γ— 0.25 = 625 weight units ECDSA equivalent:

Raw size: 72 bytes

Witness weight: 72 Γ— 0.25 = 18 weight units Effective ratio after SegWit discount: ~35x β†’ ~8-9x The SegWit discount significantly reduces the fee premium for XMSS-signed inputs.

12.5 Projected Chain Growth

Scenario Tx/Day Chain Growth/Year 10-Year Size
Bitcoin (current) ~500,000 ~50 GB ~600 GB
SNTI (coinbase only) ~1,440 ~1.5 GB ~15 GB
SNTI (all tx XMSS) ~50,000 ~45 GB ~450 GB
SNTI (L2 + settlement) ~1,440 ~1.5 GB ~15 GB

Key insight: With Layer-2 adoption (Lightning-style payment channels), SNTI's on-chain footprint remains comparable to Bitcoin. The XMSS overhead is absorbed at the settlement layer, not every micro-transaction.

12.6 The Five Mitigations

Mitigation 1: Pruning (Available Now)

Bitcoin Core's pruning mode allows nodes to discard historical block data while retaining the full UTXO set. SNTI inherits this capability. A pruned SNTI node requires only ~10 GB regardless of chain age β€” making full node operation accessible to anyone with a consumer laptop.

Mitigation 2: SegWit Witness Discount (Active)

All XMSS signatures are stored in witness data, receiving the 75% weight discount built into the SegWit protocol. This reduces effective block space consumption by 4x compared to naive implementation.

Mitigation 3: Layer-2 Payment Channels (Roadmap Q3 2027)

The most powerful mitigation. Lightning Network-style payment channels move the vast majority of transactions off-chain: Without L2: 1,000 transactions = 1,000 on-chain XMSS signatures

With L2: 1,000 transactions = 2 on-chain settlements (open + close) Result: 500x reduction in on-chain XMSS overhead for high-frequency payments Mitigation 4: Archival vs. Light Nodes

SNTI supports three node modes: - Full archival node: Complete chain history (~15 GB/year) - Pruned full node: UTXO set only (~10 GB total, any age) - SPV light node: Headers only (~50 MB) β€” sufficient for wallet use

Institutional infrastructure uses archival nodes. Consumer wallets use SPV. The economics remain favorable at both ends.

Mitigation 5: Future Signature Upgrade Path

SNTI's architecture supports signature scheme upgrades via soft fork. If a more compact quantum-safe scheme achieves sufficient security confidence, migration is possible without chain restart: Potential future schemes:

FALCON-512: 666 bytes (9x smaller than XMSS, lattice-based)

Dilithium2: 2,420 bytes (similar to XMSS, lattice-based) SNTI position: XMSS today (hash-based, zero new assumptions)

β†’ upgrade path open as PQC landscape matures

12.7 The Fundamental Trade-off

This is not a flaw to hide. It is a trade-off to understand: β”Œβ”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”

β”‚ THE XMSS TRADE-OFF β”‚

β”‚ β”‚

β”‚ WHAT YOU GIVE UP: β”‚

β”‚ └── Signature size: 2,500 bytes vs 72 bytes (ECDSA) β”‚

β”‚ β”‚

β”‚ WHAT YOU GET: β”‚

β”‚ └── Immunity to Shor's algorithm β”‚

β”‚ └── NIST SP 800-208 compliance β”‚

β”‚ └── Zero new cryptographic assumptions β”‚

β”‚ └── 15+ years of security analysis β”‚

β”‚ └── No migration needed when quantum computers arrive β”‚

β”‚ β”‚

β”‚ CONTEXT: β”‚

β”‚ └── Storage costs fall 30-40% per year (Moore's Law) β”‚

β”‚ └── 10-year SNTI chain β‰ˆ 15 GB (pruned: ~10 GB) β”‚

β”‚ └── A 4TB SSD costs $80 today β”‚

β”‚ └── ECDSA will be broken. XMSS will not. β”‚

β””β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”€β”˜

12.8 Comparison: QRL's 8-Year Track Record

QRL (Quantum Resistant Ledger) has operated an XMSS blockchain since June 2018 β€” 8 years of production data.

QRL chain size after 8 years: ~50 GB (with moderate transaction volume).

For context: Bitcoin's chain is ~600 GB after 15 years with significantly higher transaction volume. XMSS bloat in practice, with low-to-moderate volume, is entirely manageable.

SNTI's projection, assuming similar growth trajectory to QRL: ~15-30 GB after 10 years.

12.9 The Institutional Perspective

For institutional investors evaluating blockchain infrastructure:

Concern Reality
"2,500 byte signatures will bloat the chain" With pruning + L2, 10-year chain β‰ˆ 15 GB
"Storage costs will be prohibitive" 4TB SSD = $80 today, falling 35%/year
"Transaction fees will be too high" SegWit discount + L2 keeps fees competitive
"Throughput will be too low" L2 channels handle 1M+ tx/sec off-chain
"Can't compete with ECDSA chains" ECDSA chains will be quantum-broken by 2030

The question is not "Is XMSS perfectly efficient?" β€” it is not. The question is "Is the trade-off worth making?" β€” unambiguously yes.

When a sufficiently powerful quantum computer arrives, every ECDSA blockchain faces an existential crisis. Storage optimization can be engineered. Quantum resistance cannot be retrofitted cheaply.

Assentian-PQE made the right trade-off on day one.


13. Risk Analysis

13.1 Technical Risks

Risk Likelihood Impact Mitigation
XMSS key exhaustion Low Medium 1,024 sigs/key; rotation enforced
Implementation bugs Medium High External audit planned; bug bounty
Quantum faster than expected Low Positive SNTI already quantum-safe
XMSS superseded by better PQC Low Medium Upgrade path via soft fork
State management errors Low High Atomic writes (fsync) prevent corruption; cross-machine wallet.dat restore is a documented user risk, not automatically mitigated β€” see README.md / MINING_GUIDE.md
Legacy ECDSA opcodes (OP_CHECKSIG) inherited from Bitcoin Core Low Low Not enforced-rejected at consensus level; no wallet or tooling generates ECDSA scripts, and no ECDSA-signed transaction has ever been mined β€” documented here for transparency rather than left implicit

13.2 Market Risks

Risk Likelihood Impact Mitigation
Bitcoin adopts PQC (by 2030) 15% High 4+ year head start; network effect
Low initial hashrate High Medium CPU-friendly launch; no ASIC advantage
Price volatility High Medium Utility-driven demand
Exchange listing delays Medium High DEX-first strategy

13.3 Regulatory Risks

Risk Likelihood Impact Mitigation
Mining regulation Medium Medium Useful-work narrative; green energy
Securities classification Low High Fair launch; no pre-mine; utility token
PQC export controls Very Low Low XMSS is currently unrestricted globally
Exchange compliance Medium Medium Legal review before listings

13.4 Competitive Analysis

Scenario A (35%): Bitcoin delays PQC migration SNTI has clear runway to 2030+. Best case for network effect accumulation.

Scenario B (35%): Bitcoin begins PQC migration (2028–2030) Migration takes 5–10 years. SNTI maintains quantum-safe advantage throughout transition. Value proposition: "Migration risk-free from day one."

Scenario C (20%): New PQC chain launches with better tech SNTI's Bitcoin Core foundation, first-mover status, and established mining network provide competitive moat.

Scenario D (10%): Quantum threat overstated, mass adoption delayed SNTI still operates as a sound-money, fixed-supply cryptocurrency with unique useful-work narrative. Downside protection from Bitcoin-model tokenomics.


14. Team & Governance

14.1 Core Team

Asep Mulya β€” Founder & Lead Developer - Creator of Assentian-PQE (SNTI) - Designed and implemented PoUW consensus - Implemented XMSS integration into Bitcoin Core - Sighash-v2 design and implementation - Contact: admin@assentian.network

14.2 Open Source Contribution

Assentian-PQE is built on the shoulders of giants:

14.3 Governance Model

Phase 1 (2026–2027): Founder-led development - Rapid iteration and bug fixes - Community input via GitHub issues - Transparent changelog and commit history

Phase 2 (2027–2028): Community governance introduction - On-chain proposal system - SNTI token voting (1 SNTI = 1 vote) - Core developer multisig for emergency fixes

Phase 3 (2028+): Fully decentralized governance - Foundation established - Grant program for ecosystem development - SNTI Improvement Proposals (SIPs)


15. Conclusion

The quantum threat to existing blockchain infrastructure is not hypothetical. It is a mathematically certain outcome of quantum computing progress β€” the only uncertainty is timing.

Assentian-PQE (SNTI) does not wait for the threat to materialize. It is built for the post-quantum world from genesis β€” June 26, 2026.

What sets SNTI apart:

  1. Operational, not theoretical β€” Mainnet live, mining working, blocks confirmed
  2. NIST-compliant β€” XMSS from SP 800-208, the gold standard for stateful PQC
  3. Bitcoin DNA β€” 15 years of battle-tested code as the foundation
  4. Useful work β€” Mining produces real cryptographic value, not wasted hashes
  5. Fair launch β€” No pre-mine, no VC allocation, no insider advantage
  6. First mover β€” The only working, mineable, post-quantum blockchain

The question investors should ask is not "Will quantum computers threaten ECDSA?" β€” they will. The question is: "When the quantum inflection point arrives, which blockchain will already be ready?"

The answer is Assentian-PQE.


References

  1. NIST SP 800-208 β€” Recommendation for Stateful Hash-Based Signature Schemes (2020)
  2. IETF RFC 8391 β€” XMSS: eXtended Merkle Signature Scheme (2018)
  3. NIST FIPS 204 β€” Module-Lattice-Based Digital Signature Standard (2024)
  4. NIST FIPS 205 β€” Stateless Hash-Based Digital Signature Standard (2024)
  5. Bitcoin Core β€” Reference implementation, MIT License
  6. HΓΌlsing, A. & Rijneveld, J. β€” XMSS Reference Implementation
  7. IBM Quantum β€” Quantum computing roadmap 2023–2033
  8. Google Quantum AI β€” Beyond Classical Computing (2019)

Assentian-PQE Whitepaper v1.2 | Updated 28 July 2026 Genesis: "Assentian-PQE 22/Jun/2026 XMSS Post Quantum Era - For Sentia" Contact: admin@assentian.network GitHub: https://github.com/assentian-network/AssentianPQE-SNTI