New Book: The Bitcoin Economy , Read free online or get your own copy. Read Now Buy on Amazon
Toshi PQ1 demo

Hardware signing with public verification.

Toshi PQ1 keeps ML-DSA-87 private key material inside the hardware boundary. The browser-facing review packet only shows the challenge, public key, signature, and verification result.

The device

Toshi PQ1 — shipping in five colors.

Post-quantum firmware on a production-grade secure element. Keys generated on-chip, signatures produced on-chip, private key material never leaves the hardware boundary.

Toshi PQ1 hardware wallet shown in five colors
Signing simulator

Watch classic, then post-quantum — on the device screen.

Same challenge, two signing flows. Classic ECDSA completes quickly with a 71-byte signature but leaks no quantum-safety. ML-DSA-87 takes longer and produces a 3309-byte signature, but remains verifiable after cryptographically relevant quantum computers arrive.

Classic · ECDSA (secp256k1)
Sig size 71 B
Pub key 33 B
Sign time ~18 ms
Quantum safe ✗ no
Post-quantum · ML-DSA-87
Sig size 3309 B
Pub key 1952 B
Sign time ~62 ms
Quantum safe ✓ yes
Signing fixture

The device signs. The verifier checks public output.

The hardware claim is deliberately narrow: private key material remains on-device while the public verification packet can be exported, reviewed, and committed into Memory Blocks.

{
  "type": "proofnet_toshi_pq1_signature_packet_v0",
  "attesto_type": "hardware_signature",
  "device": "toshi-pq1-demo-unit",
  "challenge": "Proofnet review challenge",
  "challenge_digest": "sha3-512:44aa...91d0",
  "proofnet_pq_algorithm": "ML-DSA-87",
  "public_key_bytes": 1952,
  "signature_bytes": 3309,
  "private_key_exported": false,
  "verification_result": "fixture_valid",
  "public_safe": true
}
Verification path

Challenge, device, signature, record.

01

Prepare challenge

A deterministic review message is generated off-device.

02

Sign on device

The private key stays inside the Toshi PQ1 hardware boundary.

03

Verify output

Verifier checks public key, signed message, signature, and digest.

04

Export proof

The hardware proof packet can be stored as a safe review artifact.