Key derivation model
The wallet can derive multiple identity families from one recovery phrase. Each signer scheme uses a separated derivation branch.
Branch summary
| Scheme | Branch purpose |
|---|---|
| Ed25519 | Solana-compatible signing and fee payment. |
| Secp256k1 | Ethereum-style identity and cross-chain governance. |
| Falcon-512 | Deterministic Falcon seed material. |
| Winternitz | Stateful one-time-signature keychain material. |
Security interpretation
Separate branches mean one derived key is not used as input to another derived key. Compromise of a classical private key should not automatically reveal the Falcon or Winternitz branch.
The recovery phrase still controls all branches. Protect it as the root secret.
Quantum interpretation
Ed25519 and Secp256k1 remain classical. Adding them to a wallet does not make them quantum-resistant. Quantum readiness comes from adding Falcon or Winternitz members and requiring post-quantum approvals in multisig policy.
Technical key derivation
Read the broader security note.