Agent wallets
Give agents wallets that survive Q-day.
Wallets derived from the agent's identity. Each transfer is signed twice: secp256k1 so the chain accepts it, and a one-time WOTS leaf so the record survives a quantum adversary.
reading the index
- … transfer records
- … identities
- … leaves burned
Your wallets
derived in this tabidentity needed
Unlock your identity to derive wallets
This needs your post-quantum identity: 256 one-time keys derived once from your wallet, kept in this tab only. Derive it, then come back here.
Go to Identitysecp256k1 signature, for the chain65 B
forgeable after Q-day
WOTS signature and Merkle path, for the record2,404 B
checks with SHA-256 alone
67 chain values8 Merkle siblingsthe leaf index
signed twice
Two signatures, one transfer.
Robinhood Chain accepts secp256k1, so a transfer from a derived wallet carries that signature to move the funds. The same transfer is signed by one WOTS leaf and anchored as a record. When the curve falls, the first signature can be forged. The record cannot.
- chain
- secp256k1, as every wallet today
- record
- one WOTS leaf over the same transfer
- derived
- from your identity, one index per wallet