---
title: "Are STARKs post-quantum secure?"
description: "FRI-based STARKs rely only on collision-resistant hash functions, so they have no known quantum-vulnerable assumption, unlike pairing- or discrete-log-based…"
type: "question"
url: "https://zkpick.com/faq/are-starks-post-quantum-secure/"
section: "01 Choosing a proof system"
authors:
  - "MarketComp"
publisher: "MarketComp"
version: "1.3"
updated: "2026-09-12"
license: "CC-BY-4.0"
json: "https://zkpick.com/data/faq/are-starks-post-quantum-secure.json"
---

*By MarketComp. Updated 2026-09-12. Version 1.3. CC BY 4.0.*

# Are STARKs post-quantum secure?

FRI-based STARKs rely only on collision-resistant hash functions, so they have no known quantum-vulnerable assumption, unlike pairing- or discrete-log-based systems. This is a plausibility argument about assumptions, not a proof of quantum security, and it says nothing about the rest of your system — signatures, key exchange and encryption remain separate problems. See Section 01.