Monero Research Lab announced a decision to adopt CSIDH-1024 as the project's post‑quantum key‑exchange scheme.

Implementation and address format

The chosen scheme will be integrated into Jamtis, a new address format replacing CryptoNote‑compatible Monero addresses in the future.

Under the new format, addresses expand to about 400 characters, compared with 95 characters in the current standard Monero address representation.

Every transaction will include a public CSIDH-1024 key; legacy wallets will simply ignore this embedded data, so their blockchain scanning performance remains unchanged.

Security trade‑offs and properties

Developers preferred CSIDH-1024 over CSIDH-512 to provide a larger security margin against future quantum attacks.

The update estimates that breaking the chosen parameter set by a quantum computer would require approximately 2×10⁷ years, according to the project rationale.

Unlike lattice‑based approaches, CSIDH preserves a noninteractive key‑exchange property (NIKE), which Monero requires for transactions involving multiple recipients.

Code‑based schemes produce impractically large addresses, while lattice solutions significantly increase transaction sizes; the team states that CSIDH-1024 balances both constraints.

Roadmap

The implementation timeline is marked as "Coming Soon" without a fixed date; deployment will follow audits and testing with a flexible schedule.