Vitalik Buterin reveals Ethereum’s quantum resistance roadmap

Buterin suggests replacing BLS consensus-layer signatures with hashing schemes, such as Winternitz variants.

Ethereum founder Vitalik Buterin shared a quantum resistance roadmap for the ecosystem.

This follows the identification of post-quantum preparation as a critical consideration in several areas of development.

Quantum Security Update

In a message published on social networks, Buterin described specific parts of the network that may face vulnerabilities from the advancement of quantum computers, including BLS consensus signatures, data access systems using KZG commitments and proofs, external account signatures based on ECDSA and the zero-know1 or Know1 layer.

He went on to propose technical approaches to address these areas of risk as part of the quantum resistance roadmap. For example, he proposed consensus layer security by replacing BLS signatures with hash variants such as Winternitz variants while using STARK aggregation to allow fast verification.

Buterin explained that this is because the transition to a thin and final consensus could reduce the number of signatures required per slot, possibly eliminating the need for summaries in the early stages.

As part of this process, the network must also choose a long-term hashing method and choose from several available options to ensure strong and reliable security in the future.

Ethereum’s developer also proposed changing the way data is stored and shared throughout the system by introducing a newer method designed to improve long-term security. However, he noted that this adjustment would require additional technical work to handle larger testing processes.

You may also like:

Protocol level settings

For external accounts, Buterin wants to introduce native account abstraction via EIP-8141, a change that will allow them to support multiple signature methods, including those designed to counter quantum threats.

Current ECDSA signature verification costs about 3,000 gas, while quantum-resistant alternatives require more resources and can cost around 200,000 gas. Despite being expensive, he believes ongoing improvements are expected to make them more efficient.

In addition, the protocol plans to use aggregation methods that combine multiple signatures into a single verification step in the long run to reduce network load.

The roadmap also discusses the proof systems that play a role in validating transactions and applications on Ethereum. Similarly, while existing ZK-SNARK proofs are relatively efficient, quantum-resistant STARK proofs come at a much higher cost.

To address this issue, he described a solution within EIP-8141 that allows multiple transaction checks to be aggregated through a single argument before reaching the blockchain, reducing on-chain computation and improving scalability.

Last month, the Ethereum Foundation announced that the next phase of the ecosystem will prioritize expanding the network’s capacity and maintaining long-term security and stability.