The zero-knowledge proof world just got a meaningful upgrade. A16z crypto has released Lattice Jolt, an overhauled version of its open-source zkVM that ditches elliptic-curve cryptography in favor of a lattice-based architecture designed to withstand attacks from quantum computers.
The result: proving times that are 2 to 3 times faster than the previous version, proof sizes between 65 and 80 KB, and memory usage cut roughly in half.
What Lattice Jolt actually does differently
At its core, the upgrade replaces the cryptographic plumbing. The original Jolt, launched in April 2024, relied on Dory, a polynomial commitment scheme built on elliptic-curve math.
Lattice Jolt swaps Dory for a new polynomial commitment scheme called Akita. Think of a polynomial commitment scheme as the mechanism that lets a prover convince a verifier that a computation was done correctly, without revealing the underlying data. Akita does this using lattice-based math, which operates under the Module-SIS assumption with 128-bit security strength, aligned with NIST’s post-quantum standards.
Akita was developed collaboratively by LayerZero, Carnegie Mellon University, and the University of Southern California. It’s described as the first production-ready lattice-based polynomial commitment scheme, and it supports a transparent setup that eliminates the need for a trusted ceremony.
On raw performance, the numbers are hard to ignore. Lattice Jolt achieves up to 2 million RV64IMAC cycles per second running on CPU alone, no GPU required. Flip on GPU acceleration and that figure climbs past 10 million cycles per second. Memory usage per cycle dropped from roughly 300 bytes to 200 bytes compared to prior configurations.
Proof sizes tell a similar story. At 65 to 80 KB, Lattice Jolt’s proofs are significantly smaller than the 200 KB or more typical of hash-based post-quantum systems.
Why post-quantum security matters now
Quantum computers capable of breaking today’s cryptography don’t exist yet. But the threat model isn’t about what quantum machines can do today. It’s about what they’ll be able to do when they arrive, and the fact that encrypted data harvested now could be decrypted later.
NIST finalized its first set of post-quantum cryptographic standards in 2024, and the broader security community has been migrating toward quantum-resistant primitives ever since. Lattice-based cryptography, which relies on the mathematical difficulty of problems involving high-dimensional lattices, is one of the primary approaches NIST endorsed. By building on the Module-SIS assumption at 128-bit security, Akita fits squarely within that framework.
Integration and what comes next
Lattice Jolt’s initial integration is with the Zero blockchain, providing an early real-world test case for the technology. The system supports RISC-V instruction sets, a design choice that prioritizes extensibility.
The absence of any token announcement alongside Lattice Jolt is worth noting in the context of how these releases typically play out. A16z crypto chose to frame this purely as infrastructure, a technology milestone rather than a launchpad for a new asset.