Zcash developers plan a fix to keep ZEC swaps private from future quantum computers

Introduction

Zcash’s privacy guarantees could be compromised by a future quantum computer that reverses the elliptic‑curve math used to derive viewing keys from public addresses. A specific risk lies in the NEAR Intents cross‑chain swapping service, where a refund address is posted on NEAR’s public chain. If that address were cracked, an attacker could link all of a user’s ZEC transactions. The open‑source Zakura project, a newer implementation of Zcash’s protocol, has outlined a fix that isolates each swap with its own viewing key and uses private‑information‑retrieval (PIR) to locate refunds without exposing which addresses are being queried.

The quantum threat to ZEC swaps

• Public refund addresses – When a user swaps ZEC for another token via NEAR Intents, the service publishes a Zcash address on NEAR so it can return any unspent ZEC. The address contains a public key derived from the wallet’s viewing key.
• Quantum vulnerability – Classical computers cannot invert this derivation, but a sufficiently large quantum computer running Shor’s algorithm could recover the viewing key from the public address. Once obtained, the key would reveal every payment received by that wallet, undermining Zcash’s core privacy model.
• Scope of exposure – Because most Zcash wallets reuse a single viewing key across many addresses, cracking one refund address could expose the entire transaction history of the user.

Zakura’s per‑swap key solution

1. Unique viewing key per swap – Zakura proposes generating a fresh viewing key for each NEAR Intents swap. The spending key remains with the user’s main account, while the swap‑specific viewing key is used only to monitor the refund address.
2. Limited linkage – If a quantum adversary later cracks a refund address, they would see only the payments associated with that single swap, not the user’s full payment history.
3. Compatibility – The change is designed as an optional library update. Compatible software wallets can adopt it within weeks, and hardware wallets can follow once firmware support is added.

Private information retrieval for efficient recovery

A practical challenge arises: a wallet that has performed many swaps would accumulate many viewing keys, making chain scans cumbersome. Zakura addresses this with a PIR‑based database:

• Query without disclosure – The wallet asks the database, “Where did my refund land?” and receives the answer without the server learning which address was queried.
• Scalable restoration – Users can restore wallets from backups without scanning the entire chain for each key, preserving usability while maintaining privacy.

Timeline and next steps

• January target – Zcash developers have set a January deadline for implementing quantum‑resistant payment features. Zakura’s per‑swap key mechanism is slated to be available to users ahead of that date.
• Open‑source rollout – The fix is released as part of Zakura’s public repository, allowing community‑maintained wallets to integrate the feature quickly.
• Future hardening – While quantum computers capable of breaking current elliptic‑curve cryptography remain years away, proactive measures like this ensure Zcash’s privacy model stays robust.

Conclusion

By assigning a distinct viewing key to each NEAR Intents swap and leveraging private‑information‑retrieval, Zakura offers a pragmatic defense against a potential quantum attack on ZEC refunds. The approach limits the impact of any future key‑recovery breach to a single transaction, preserving the broader privacy guarantees that make Zcash unique. As the crypto ecosystem prepares for the quantum era, such targeted upgrades illustrate how protocol‑level innovation can safeguard user confidentiality without sacrificing usability.