Schedule DemoLaunch H33
Pricing
Log InGet API Key
Post-Quantum Primitive · Architecture layer: ROOT

H33-74

The 74-byte post-quantum attestation substrate that makes operational evidence portable across blockchains, verifiable independently of the operator, and durable through the quantum transition.

Definition. H33-74 is a 74-byte post-quantum attestation: a 32-byte SHA3-256 commitment anchored on-chain plus a 42-byte compact receipt kept off-chain, together signed under three independent NIST post-quantum signature families (ML-DSA, FALCON, SLH-DSA). It is a primitive — a small, fixed-size object other systems build on — not a product or a service.

An introduction to H33-74.

Watch: H33-74 — Universal Post-Quantum Verification Substrate →

How it works

from graph: concept:H33_74 · USES ML_DSA + FALCON + SLH_DSA · whitepaper §byte-structure

Any operational event — a decision, a computation result, a state change — is committed to a fixed 74-byte footprint that never grows, no matter how large the evidence behind it. The footprint splits cleanly into two halves:

ComponentSizeWhere it livesWhat it is
On-chain commitment32 bytesanchored on any chainSHA3-256 digest of the full attestation receipt
Compact receipt42 bytesoff-chain, portableversion + domain separator + signature flags + locator
Persistent footprint74 bytestotalthe H33-74 attestation

The receipt is signed under three independent NIST families at once — ML-DSA (lattice, FIPS 204), FALCON (NTRU-lattice), and SLH-DSA (hash-based, FIPS 205). Three families on different hardness assumptions means an attestation stays unforgeable even if one family is later broken.

Why 74 bytes matters

from graph: H33_74 ANCHORS_TO {chains} · on-chain footprint vs raw PQ signatures

Anchoring the raw post-quantum signatures on-chain is impractical. H33-74 anchors a single 32-byte commitment instead — smaller than the 64-byte Schnorr signatures Bitcoin already carries. Anchoring adds no cost; it subtracts it.

On-chain footprintPer attestation1B attestationsFamilies covered
H33-74 (on-chain commitment)32 bytes32 GB3
ML-DSA signature on-chain3,309 bytes3.3 TB1
All three families on-chain21,054 bytes21 TB3

How H33 makes post-quantum scale — the measured byte collapse →

Artifact size: how 74 bytes compares with an ordinary log record

illustrative artifact-size comparison · NOT an equivalent-workload or total-cost comparison

A frequent question is how the attestation compares with the log line a system would otherwise write. Conventional structured log records commonly run on the order of 100–300 bytes. Against that range, a 74-byte attestation is roughly 26% to 75% smaller per record:

ArtifactIllustrative sizeVs. H33-74 attestation
H33-74 attestation74 bytes—
Small log record100 bytesattestation 26% smaller
Mid-range log record200 bytesattestation 63% smaller
Large log record300 bytesattestation 75% smaller

What this comparison is. It compares the size of one portable artifact against an illustrative log record. The 100–300 byte range is a representative convention, not a measurement of any specific customer system, and the percentages are arithmetic on those illustrative figures.

What this comparison is not. It is not a comparison of equivalent capability, and not a total-cost comparison. A log record contains its own content; an H33-74 attestation commits to evidence that is retained separately, and the post-quantum signatures that make it checkable are carried alongside it — a single ML-DSA-65 signature is 3,309 bytes, far larger than the attestation itself. A system that retains the full evidence package and signature set stores considerably more than 74 bytes per event. Conventional logs and cryptographic attestations also serve different purposes: a log is a record an operator asks you to trust, while an attestation is evidence a third party can independently verify without trusting the operator or H33.

What would make it a cost claim. A defensible cost or efficiency claim requires a workload-level measurement that counts signatures, storage, retention, computation, transmission and verification together, on a stated configuration. H33 publishes no such measurement today, and therefore makes no total-cost claim. What is measured and reproducible is published with its methodology: ML-DSA-65 sizes, latencies and throughput, the on-chain footprint analysis, and the full benchmark suite.

The byte-exact wire format → · Receipt specification →

What proves it

from graph: H33_74 DOCUMENTED_BY /benchmarks/ + /schemas/ · PROOF_PAGE_IS_NOT_PROOF_ARTIFACT

Every claim resolves to a reproducible artifact, never to marketing copy. Performance and wire-format evidence live in dedicated, independently-reproducible surfaces:

Benchmarks

Signing and verification timings under the fixed footprint, with per-result cost decaying O(1/N) under batched Merkle aggregation — /benchmarks/.

Receipt schema

The byte-exact wire format (commitment at bytes 0–31, signature flags) — /schemas/h33-74/ and the receipt spec.

How anyone verifies it — with H33 not in the loop

from graph: H33_74 VERIFIED_BY VERIFIER · VERIFICATION USES H33_74 as artifact substrate

An attestation is checked by an independent, open verifier you download and run offline. It recomputes the 32-byte commitment from the receipt, checks all three post-quantum signatures, and confirms the on-chain anchor — with no contact to H33. Certainty rests in the bytes and a conformance-attested verifier, never an H33 service. The direction is acyclic: verifier → verifies → attestation → proves → claim.

How verification works → · The independent verifier →

What builds on it

from graph: inbound USES / BUILT_ON H33_74

H33-74 is the ROOT substrate — the one primitive nearly everything above it consumes:

Agent-008emits a Provable Authority Package on the H33-74 substrate
HATScontinuous attestation records built on H33-74
APQCevery migration phase produces H33-74-signed evidence
Authority Centerauthority state preserved as replayable H33-74 evidence
PQ-Verifiedits artifact is built on the H33-74 footprint
Verified encrypted computationan FHE result is attested without ever being decrypted
Digital SCIFa five-layer custodial model in which every governed action carries an H33-74 evidence receipt

What it produces

from graph: H33_74 PRODUCES attestation-receipt (issuer tooling)

H33-74 issues one thing: the 74-byte attestation. The issuer takes any evidence bundle, distills it to the fixed footprint, signs it under the three families, and returns a portable receipt plus its 32-byte anchor — the same object regardless of who produced it or which chain it anchors to. Issue and verify →

from graph: H33_74 CONSUMES H33-PQ-Time (temporal substrate)

Every H33-74 receipt contains a cryptographically bound H33-PQ-Time temporal proof. H33-74 cannot exist without it: each receipt binds a governed, bounded, replayable temporal proof from H33-PQ-Time — the single temporal authority proving when, in what causal order, within what bounded uncertainty, and with what replay/fork guarantees an event occurred. H33-PQ-Time is independently reusable infrastructure — H33-74 is one consumer; it consumes temporal truth, it does not originate time. See how time is proven →

Where it anchors — portability, not migration

from graph: H33_74 ANCHORS_TO {Bitcoin, Ethereum, Solana, Zcash, Avalanche, …}

One receipt anchors to many chains without being rewritten. The evidence is never bound to any chain — the chain is an interchangeable notarization anchor, so the evidence survives chain migration, deprecation, or a chain disappearing entirely.

ChainAnchor methodOn-chainConsensus change
BitcoinTaproot (P2TR) / OP_RETURN32 bytesNone
SolanaPDA32 bytesNone
Ethereum / L2scalldata / log32 bytesNone
Zcash, Avalanche, Polygon …native anchor32 bytesNone

One receipt, three chains, zero migration →

Next step

from graph: H33_74 CONVERTS_TO (via products) EVALUATION_PATH

H33-74 is a primitive — you adopt it through the products built on it, or evaluate it directly.

See H33-74 prove your evidence

Deep reference

from graph: H33_74 DOCUMENTED_BY whitepaper + schema + spec

Technical whitepaper (formal specification) · Receipt schema v1.0 · Attestation receipt spec · Benchmarks

Related architecture, comparisons & applications

Architecture: Portable artifact architecture · Evidence bundles (downloads)

Comparisons: H33 vs blockchain audit-trail tools

Applications & proofs: H33 self-attestation · The end of the blockchain era (Proof Lab)

One cryptographic foundation H33-74 is one application of the shared H33 cryptographic foundation — fully homomorphic encryption, zero-knowledge proofs and post-quantum keys behind a common API. ArchitectureCommon APIThe product family
Claims are cheap. Artifacts survive.

Every H33-74 attestation downloads in 32 bytes.

PQ-Verified →Proof Lab →Verify an artifact →Verify a receipt →
How this fits

Customer Outcome · Works With · Powered By

Three views of the same product. What you get. What you'll pair it with. What runs underneath.

Customer Outcome

A receipt anyone can verify offline, in 74 bytes, with no vendor account, no platform login, no internet connection. Your evidence doesn't depend on us being around.

Works With
Powered By

Three independent post-quantum signature families (ML-DSA-65 · FALCON-512 · SLH-DSA-SHA2-128f) · Append-only domain-separation registry · Multi-chain anchoring · Vendor-independent verifier

See how all H33 products compose →
From the blog

Technical deep dives on the substrate

1,239× memory reduction from a Count-Min SketchThe 42-Byte Verification ReceiptBatched Merkle aggregation: 74 bytes for a billionHow we made Bitcoin post-quantum without a softforkEvery computation type deserves a byteWe Anchored the First Substrate to BitcoinWhy H33 Substrate doesn't replace AWS KMSBinding Proof: How 74 Bytes Chains a Document to BitcoinCryptographic Document Version Control in 74 BytesWhy a Biometric Attestation Can Never Masquerade as a Bitcoin UTXOFive Proofs, One Primitive: What We Just UnlockedFrom Bitcoin Taproot to Full Verification in 42 BytesSix Ways to Tamper with a Substrate (and Why All Six Fail)Zero-Knowledge Proofs Over a 74-Byte Substrate TagIntroducing H33-Agent-74: Post-Quantum Infrastructure for Multi-Agent AIIntroducing H33-Truth: Cryptographic Evidence vs Security LogsWhy We Open-Sourced the Verifier, Not the EngineWe Load-Tested Our Cache Honestly. Here's What Broke.The Three Contended-Lock Bugs We Found at 96 WorkersHow H33 Can Demo Post-Quantum Security with SolanaA 22,857x Solana PnL Speedup with Cachee
Related products

Products built on H33-74

Attestation APILookupSTARK EnginesBiometricsH33-RWABitBondsH33-PQ-VideoCKKSTFHEMPCEncrypted SearchStorage EncryptionArchiveSignArchive VerifyReplayCacheeV100H33 Post-Quantum APIH33-SentinelMedVaultDeviceProofQuantumVaultH33-AttestH33-Private-CommerceH33-Truth