Know the bytes before you need them.
Trellis helps Solana teams put numbers on their post-quantum exposure. Read a sourced primer, run classical and post-quantum cryptography side by side in your browser, and score where your team stands with a check that shows its own formula.
Primer
Five chapters, written for engineers: what Shor and Grover actually threaten, what the NIST replacements weigh, how Solana checks a signature, and how to design so the swap is boring. Every chapter lists its sources.
OpenLab
Ed25519, ML-DSA-44/65/87 and SLH-DSA signing next to each other, X25519 beside ML-KEM-768, with real sizes and timings from your machine. A Devnet panel sends an actual transaction so you can count its bytes.
OpenReadiness check
Fifteen questions in five areas, from where you sign to who owns the plan. You get a score with the formula shown, a per-area breakdown, concrete next steps and a JSON export.
OpenByte budget
Every signature has to fit inside a 1,232 B transaction. Here is what each scheme spends on the smallest possible transfer.
| Scheme | Family | Standard | Pubkey | Signature | Sig vs Ed25519 | Min transfer | Lab |
|---|---|---|---|---|---|---|---|
| Ed25519 | Classical | RFC 8032 | 32 B | 64 B | baseline | 183 B | runs |
| ML-DSA-44 | Lattice | FIPS 204 (Dilithium) | 1,312 B | 2,420 B | 37.8× | 3,819 B · 3.1× | runs |
| ML-DSA-65 | Lattice | FIPS 204 (Dilithium) | 1,952 B | 3,309 B | 51.7× | 5,348 B · 4.3× | runs |
| ML-DSA-87 | Lattice | FIPS 204 (Dilithium) | 2,592 B | 4,627 B | 72.3× | 7,306 B · 5.9× | runs |
| SLH-DSA-SHA2-128f | Hash-based | FIPS 205 (SPHINCS+) | 32 B | 17,088 B | 267.0× | 17,207 B · 14.0× | runs |
| Falcon-512 | Lattice | FIPS 206 (draft) | 897 B | 666 B | 10.4× | 1,650 B · 1.3× | size only |
Sizes from FIPS 204, FIPS 205, the FIPS 206 draft and RFC 8032. Min transfer = a real 183-byte Ed25519 self-transfer with the signature and the full public key swapped in.
Already in play
Ciphertext captured today can be opened once key exchange breaks. Anything that must stay secret for years is exposed now, not on some future date.
Lead time, not a date
Nobody credible can name the year. What you can measure is how long your own migration takes, and that number is usually longer than people guess.
3.1× the cap
A one-signer transfer signed with ML-DSA-44 comes to about 3,819 bytes once its key rides along. Solana allows 1,232.
$TRELLIS
This panel is the only source of official Trellis addresses. Compare every character before you trust an address.
What Trellis is not. It is not a security certification, and using it does not make a wallet, program or protocol quantum-resistant. The lab code is for learning; anything you ship needs its own review. Chain calls go to Solana Devnet only, and keys are created in your browser and never stored.