@qorechain/wallet-adapter

Add QoreChain to any Cosmos wallet — Keplr, Leap, Cosmostation — and send its PQC-required transactions, with no wallet-side changes.

QoreChain's ante chain rejects any Cosmos tx that lacks a FIPS-204 ML-DSA-87 hybrid signature (in a tx-body extension option) alongside the account's classical secp256k1 signature. Stock wallets can't produce ML-DSA signatures — so this adapter does. The design is what makes it drop-in:

The wallet only ever produces a standard SIGN_MODE_DIRECT signature over the final transaction body. The adapter bakes the ML-DSA-87 extension into that body before the wallet signs it. So wallet.signDirect(...) works exactly as it does for any Cosmos chain — it has no idea PQC is involved.

The ML-DSA part uses @qorechain/pqc — the same FIPS-204 implementation the chain itself was migrated to, so the signatures are byte-compatible and verify in the chain's ante. (Before that migration this was impossible: the chain ran a non-standard Dilithium variant no JS lib could match.)

Why it works — the protocol

Mirrors the chain's own qorechaind tx pqc cosign:

B0   = TxBody{messages, memo, timeoutHeight}              // no extension
sigP = ML-DSA-87.sign( frame(B0, authInfoBytes) )         // adapter does this
body = TxBody{ ...B0, extensionOptions:[ PQCHybridSignature{1, sigP} ] }
sigC = wallet.signDirect( SignDoc{ body, authInfo, chainId, accountNumber } )
tx   = TxRaw{ body, authInfo, [sigC] }

where frame(b0, auth) = BE32(len b0) ‖ b0 ‖ BE32(len auth) ‖ auth, the extension type URL is /qorechain.pqc.v1.PQCHybridSignature, and algorithm 1 = ML-DSA-87.

Verified end-to-end: an adapter-built tx (ML-DSA-87 via @noble/post-quantum

• classical via a cosmjs signer standing in for Keplr) committed with code 0 against a live 7-validator QoreChain — the PQC ante accepted it.

Usage (Keplr)

import {
  QoreChainSigner, qoreChainInfo, derivePqcKeyFromWallet,
} from '@qorechain/wallet-adapter';

// 1. Register the chain with the wallet (one click for the user).
await window.keplr.experimentalSuggestChain(qoreChainInfo({ rpc, rest }));
await window.keplr.enable('qorechain-diana');
const signer = window.keplr.getOfflineSigner('qorechain-diana');
const [account] = await signer.getAccounts();

// 2. Derive the user's ML-DSA-87 key, bound to their wallet (no mnemonic export).
const pqc = await derivePqcKeyFromWallet(window.keplr, 'qorechain-diana', account.address);
// (first time only) register the PQC public key on-chain via MsgRegisterPQCKey —
// that message is classical-exempt, so the wallet can sign it normally.

// 3. Sign + broadcast a PQC-required tx. The wallet signs an ordinary SignDoc.
const adapter = new QoreChainSigner({
  wallet: window.keplr, chainId: 'qorechain-diana', address: account.address,
  pubkeySecp256k1: account.pubkey, accountNumber, pqc,
});
const txBytes = await adapter.signHybrid({ messages, fee, sequence });
await fetch(`${rpc}`, { method:'POST', body: JSON.stringify({
  jsonrpc:'2.0', id:1, method:'broadcast_tx_sync', params:{ tx: toBase64(txBytes) } }) });

Wallet support

| Wallet | How | Status | |---|---|---| | Keplr | experimentalSuggestChain + signDirect | ✅ supported | | Leap / Cosmostation | same signDirect interface | ✅ supported (any wallet exposing signDirect) | | MetaMask | uses QoreChain's EVM path (chainId 9800) — structurally PQC-exempt | ✅ works natively, no adapter needed | | Phantom | QoreChain's Solana-compatible RPC (:8899) | ⚠️ read/native-send; PQC SVM execute needs the same hybrid pattern |

API

• frame(b0, auth) — QoreChain hybrid sign-bytes framing.
• encodePqcHybridSignature(algId, sig) — proto encoder for the extension.
• derivePqcKeyFromWallet(wallet, chainId, address) — deterministic ML-DSA-87 key from a wallet signature.
• QoreChainSigner#signHybrid({ messages, fee, sequence, memo?, timeoutHeight? }) → TxRaw bytes.
• qoreChainInfo({ chainId?, rpc, rest }) — Keplr chain descriptor.

License

Apache-2.0