Blab Crypto
Project Eleven Unveils Fast Zero-Knowledge Proof Prototype for Bitcoin Wallets
Project Eleven, a post‑quantum cryptography firm, announced on 15 July 2026 that it had built a zero‑knowledge proof (ZKP) prototype that lets a Bitcoin user demonstrate control of a wallet without revealing the private key. The prototype was developed with Jim Posen, lead maintainer of the Binius ZKP system, and is described as an early, unaudited proof of concept.
The proof is designed to work in a scenario where a powerful quantum computer could, in theory, recover private keys from exposed public keys—a threat that researchers refer to as “Q‑Day.” Bitcoin and many other cryptocurrencies rely on elliptic‑curve cryptography (ECC) to sign transactions. A sufficiently advanced quantum machine could use Shor’s algorithm to solve the discrete logarithm problem that underpins ECC, potentially exposing wallet ownership. Project Eleven’s approach instead relies on hardened derivation steps used in BIP‑32 hierarchical deterministic wallets. Because the derivation uses hash‑based functions that are not susceptible to quantum attacks, the proof can confirm that the private key exists within the derivation tree without revealing it.
The system can tie a proof to a specific transaction message, allowing a user to prove ownership for a particular action while keeping all sensitive data private. According to the company, the prototype generates proofs in 243 milliseconds and verifies them in 40 milliseconds on an Apple M5 MacBook Air equipped with four CPU cores and no GPU acceleration. Peak memory usage is 2.1 GB and the proof size is 358 KiB. Project Eleven claims this is roughly 16 times faster than a prior approach by developer Olaoluwa Osuntokun, which required 14.6 seconds and GPU acceleration.
The prototype supports three Bitcoin address types: P2PKH, P2WPKH, and P2SH‑P2WPKH. However, the technology does not yet enable recovery of assets on any live blockchain, and it requires explicit protocol‑level support from Bitcoin or other networks to be usable in practice. The project therefore represents one of several research avenues being explored as the industry considers long‑term cryptographic upgrades.
Project Eleven’s work builds on earlier academic research by Sattath and Wyborski and follows the broader trend of post‑quantum solutions for cryptocurrency. While the threat of quantum‑enabled key recovery is not considered immediate—current quantum hardware is far from the scale required to break ECC—researchers and developers have been preparing for a future where the existing cryptographic foundations may no longer be secure.
The company’s announcement adds to a growing body of proposals that aim to provide quantum‑resistant mechanisms for proving wallet ownership. If adopted, such proofs could give users an additional tool to protect access to funds as quantum computing advances. At present, the prototype remains a research prototype; no protocol changes or network upgrades have been made to support it.
In summary, Project Eleven has demonstrated a fast, hash‑based zero‑knowledge proof that can confirm control of a Bitcoin wallet without exposing private keys. The prototype is not yet a practical solution for wallet recovery or quantum‑attack protection, and it requires future protocol support to be deployed. The broader cryptocurrency community continues to monitor quantum‑computing developments and to explore post‑quantum cryptographic options.
The proof is designed to work in a scenario where a powerful quantum computer could, in theory, recover private keys from exposed public keys—a threat that researchers refer to as “Q‑Day.” Bitcoin and many other cryptocurrencies rely on elliptic‑curve cryptography (ECC) to sign transactions. A sufficiently advanced quantum machine could use Shor’s algorithm to solve the discrete logarithm problem that underpins ECC, potentially exposing wallet ownership. Project Eleven’s approach instead relies on hardened derivation steps used in BIP‑32 hierarchical deterministic wallets. Because the derivation uses hash‑based functions that are not susceptible to quantum attacks, the proof can confirm that the private key exists within the derivation tree without revealing it.
The system can tie a proof to a specific transaction message, allowing a user to prove ownership for a particular action while keeping all sensitive data private. According to the company, the prototype generates proofs in 243 milliseconds and verifies them in 40 milliseconds on an Apple M5 MacBook Air equipped with four CPU cores and no GPU acceleration. Peak memory usage is 2.1 GB and the proof size is 358 KiB. Project Eleven claims this is roughly 16 times faster than a prior approach by developer Olaoluwa Osuntokun, which required 14.6 seconds and GPU acceleration.
The prototype supports three Bitcoin address types: P2PKH, P2WPKH, and P2SH‑P2WPKH. However, the technology does not yet enable recovery of assets on any live blockchain, and it requires explicit protocol‑level support from Bitcoin or other networks to be usable in practice. The project therefore represents one of several research avenues being explored as the industry considers long‑term cryptographic upgrades.
Project Eleven’s work builds on earlier academic research by Sattath and Wyborski and follows the broader trend of post‑quantum solutions for cryptocurrency. While the threat of quantum‑enabled key recovery is not considered immediate—current quantum hardware is far from the scale required to break ECC—researchers and developers have been preparing for a future where the existing cryptographic foundations may no longer be secure.
The company’s announcement adds to a growing body of proposals that aim to provide quantum‑resistant mechanisms for proving wallet ownership. If adopted, such proofs could give users an additional tool to protect access to funds as quantum computing advances. At present, the prototype remains a research prototype; no protocol changes or network upgrades have been made to support it.
In summary, Project Eleven has demonstrated a fast, hash‑based zero‑knowledge proof that can confirm control of a Bitcoin wallet without exposing private keys. The prototype is not yet a practical solution for wallet recovery or quantum‑attack protection, and it requires future protocol support to be deployed. The broader cryptocurrency community continues to monitor quantum‑computing developments and to explore post‑quantum cryptographic options.
