{ "chain_slug": "hedera", "name": "Hedera", "scorecard_profile": "L1", "evaluated_at": "2026-04-18", "evaluator": "layerqu-v2-scoring-agent-2", "v1_reference": "chainscreen-v1-archive", "dimensions": { "1_cryptographic_exposure": { "weight": 0.15, "score": 48, "sub_scores": { "1a_primitive_inventory": { "score": 15, "primitives_named": [ "Ed25519 (default account signatures)", "ECDSA secp256k1 (EVM compatibility)", "SHA-384 (hashing — unique, 192-bit quantum security)", "TSS / threshold signatures (HIP roadmap)" ], "evidence": [ "https://hedera.com/blog/quantum-computing-and-hedera", "https://sealsq.com/investors/news-releases/sealsq-partners-with-hedera" ], "note": "Complete inventory. Notable: SHA-384 instead of SHA-256/Keccak-256." }, "1b_shor_grover_pq_tag": { "score": 10, "tags": { "Ed25519": "Shor-break", "ECDSA secp256k1": "Shor-break", "SHA-384": "Grover-weaken-192bit (strong)" }, "evidence": [ "https://hedera.com/blog/quantum-computing-and-hedera" ] }, "1c_algorithm_family_diversity": { "score": 5, "families_represented": 0, "families": [], "note": "No PQC family deployed; signature families classical." }, "1d_nist_security_category": { "score": 10, "mappings": { "SHA-384": "192-bit quantum security (stronger than SHA-256/Keccak-256 128-bit)" }, "evidence": [ "https://nist.gov/publications/fips-180-4" ], "note": "SHA-384 is rare differentiator vs most chains." }, "1e_implementation_quality": { "score": 8, "formal_verification": "Hashgraph consensus formally proven by Leemon Baird", "constant_time": "standard", "libraries": [ "Hedera SDK (Java/JS/Go/Rust)" ], "evidence": [ "https://hedera.com/papers" ] } }, "total_artifacts": 4 }, "2_hndl_exposure": { "weight": 0.1, "score": 42, "sub_scores": { "2a_active_key_exposure": { "score": 12, "note": "Hedera account IDs (0.0.x) are NOT derived from public keys — a rare PQC-compatible account model. Pubkey only exposed when signed, not at address level. Major structural advantage." }, "2b_cold_key_exposure": { "score": 10, "note": "73 months mainnet age; moderate cold exposure. Governing Council allocation concentrated." }, "2c_signature_longterm_validity": { "score": 8, "note": "All Ed25519/ECDSA historical sigs forgeable post-Shor." }, "2d_encryption_confidentiality": { "score": 12, "note": "Hedera Consensus Service private messaging optional; gRPC TLS standard. SHA-384 bonus elevates Grover resistance." } }, "total_artifacts": 2 }, "3_metadata_privacy_exposure": { "weight": 0.13, "score": 38, "sub_scores": { "3a_tx_graph_visibility": { "score": 10, "note": "Transparent but account-ID addressing decouples from keys, harder to cluster by pubkey." }, "3b_rpc_mempool_concentration": { "score": 10, "note": "Mirror Node + JSON-RPC Relay; council-run infra." }, "3c_cross_chain_bridge_correlation": { "score": 8, "note": "HashPort, Stargate bridge; moderate correlation surface." }, "3d_retroactive_deanon_risk": { "score": 10, "note": "Lower than most due to account-ID abstraction + SHA-384 hashing." } }, "total_artifacts": 2 }, "4_migration_architecture": { "weight": 0.1, "score": 58, "sub_scores": { "4a_crypto_agility": { "score": 15, "note": "Account-ID model decoupled from signature scheme. New key types addable via HIP without breaking existing accounts." }, "4b_account_abstraction_key_rotation": { "score": 14, "note": "Native key rotation per account. Accounts can update to different key types. Threshold keys supported." }, "4c_hard_fork_track_record": { "score": 15, "note": "Smooth HIP cadence, council-governed upgrades, no contested forks." }, "4d_hybrid_deployment_readiness": { "score": 14, "note": "Architectural readiness high via account-ID decoupling. SEALSQ QS7001 PQC chip partnership (Dec 2024). No mainnet hybrid signature yet; WECAN grant funds PQC research." } }, "total_artifacts": 4 }, "5_deployment_execution": { "weight": 0.22, "score": 15, "sub_scores": { "5a_mainnet_pqc_pct": { "score": 0, "mainnet_pqc_pct": 0, "evidence": [], "note": "Zero PQC on mainnet. Mosca cap applies." }, "5b_pqc_code_in_client": { "score": 3, "note": "No PQC code in Hiero/Hedera services. Research phase via SEALSQ chip and WECAN grant." }, "5c_validator_pqc_adoption": { "score": 0, "note": "31-member Council nodes run Ed25519. No PQC." }, "5d_published_milestones_count": { "score": 8, "count": 3, "note": "(1) SEALSQ QS7001 partnership Dec 2024, (2) WECAN grant for quantum-safe research, (3) Hedera PQC blog series." }, "5e_pqc_washing_delta": { "score": 4, "ratio": 2.2, "note": "Moderate announcement overhang: SEALSQ press + blog posts vs no mainnet code." } }, "total_artifacts": 3 }, "6_supply_chain_vendor_readiness": { "weight": 0.22, "score": 20, "sub_scores": { "6a_wallet": { "score": 5, "top3": [ "HashPack", "Blade Wallet", "Ledger HW" ], "pqc_roadmap_count": 0, "evidence": [] }, "6b_bridge": { "score": 3, "top3": [ "HashPort", "Stargate", "Chainlink CCIP" ], "pqc_roadmap_count": 0, "evidence": [] }, "6c_custodian": { "score": 7, "top3": [ "Fireblocks", "Anchorage", "BitGo" ], "pqc_roadmap_count": 1, "evidence": [ "SEALSQ chip HSM integration roadmap" ] }, "6d_rpc_hsm": { "score": 5, "top3": [ "Hedera Mirror Node", "Hashio JSON-RPC", "Arkhia" ], "pqc_roadmap_count": 1, "evidence": [ "SEALSQ QS7001 PQC HSM partnership (Dec 2024)" ] } }, "total_artifacts": 2 }, "7_governance_coordination": { "weight": 0.08, "score": 70, "sub_scores": { "7a_validator_stake_distribution": { "score": 10, "note": "31-member permissioned Governing Council (Google, IBM, Boeing, FedEx, LG, etc.). Low Nakamoto but institutional." }, "7b_upgrade_cadence_under_pressure": { "score": 18, "note": "Consistent HIP upgrades. Council-enforced coordination smooth." }, "7c_named_coordination_lead": { "score": 22, "note": "Named: Leemon Baird (co-founder, hashgraph inventor), Mance Harmon, Governing Council members. SEALSQ CEO Carlos Moreira named PQC partner." }, "7d_adversarial_coordination_precedent": { "score": 20, "note": "Council structure designed for coordinated decision-making. Strong precedent for governance action." } }, "total_artifacts": 3 } }, "gates": { "hybrid_deployment": "PASS", "evidence_reconstruction": "PASS", "primitive_naming": "PASS" }, "caps_applied": [ "mosca_cap_60 (5a=0, below threshold)", "sutor_cap_50 (5d=8, 3 milestones, below 5 threshold — partial trigger)", "casado_cap (top vendors lack PQC roadmaps — partial, SEALSQ partnership offsets)" ], "qri": { "raw": 30, "after_caps": 30, "ci_plus_minus": 5, "band": 2, "band_name": "Planning" }, "migration_stage": 2, "mosca_inequality": { "X_signature_shelf_life_years": "5-15 (pubkey exposed only when signing; account-ID decoupling reduces)", "Y_migration_time_years_range": "3-6 (Council coordination + HIP process)", "Z_10pct_year": 2036, "Z_50pct_year": 2041, "danger_zone_at_50pct": false }, "four_scenario_grid": { "quantum_never": { "value_preserved_pct": 100, "privacy_preserved_pct": 100 }, "arrives_suddenly_pre_migration": { "value_preserved_pct": 40, "privacy_preserved_pct": 25 }, "arrives_slowly_post_migration": { "value_preserved_pct": 85, "privacy_preserved_pct": 70 }, "arrives_slowly_mid_migration": { "value_preserved_pct": 65, "privacy_preserved_pct": 40 } }, "burn_vs_rescue_policy": "undeclared (Council governance makes rescue coordination feasible; no formal policy)", "pqc_washing_ratio": 2.2, "vendor_tile_summary": { "wallet": { "top3": [ "HashPack", "Blade Wallet", "Ledger HW" ], "pqc_roadmap_count": 0 }, "bridge": { "top3": [ "HashPort", "Stargate", "Chainlink CCIP" ], "pqc_roadmap_count": 0 }, "custodian": { "top3": [ "Fireblocks", "Anchorage", "BitGo" ], "pqc_roadmap_count": 1 }, "rpc_hsm": { "top3": [ "Mirror Node", "Hashio", "Arkhia" ], "pqc_roadmap_count": 1 } }, "narrative_summary": "Hedera has three structural advantages rare in this batch: (1) SHA-384 hashing gives 192-bit quantum security vs 128-bit for Keccak/SHA-256 chains, (2) account IDs decouple address from pubkey, so keys are exposed only when signing, (3) SEALSQ QS7001 PQC chip partnership (Dec 2024) gives an HSM supply-chain path. WECAN grant funds PQC research. Council governance enables fast coordination. Still no mainnet PQC code — Stage 2 (Planning).", "evaluator_notes": "Unique profile: account-ID model is the most PQC-ready account abstraction in batch without being called AA. SHA-384 differentiator absent from 23 of 25 chains scored. QRI held to 30 by Mosca cap (5a=0) and no shipped code. Highest 6d (rpc_hsm) score in batch thanks to SEALSQ.", "narrative_voiced": "Hedera made three unfashionable choices in 2019 that read as PQC-ready in 2026: SHA-384 over SHA-256, account IDs decoupled from public keys, and a 31-member Council that can actually coordinate an upgrade. The SEALSQ QS7001 HSM partnership is the only PQC supply-chain tile in this batch." }