Vitalik Buterin unveils Ethereum’s comprehensive quantum resistance roadmap

Buterin proposes replacing BLS consensus-layer signatures with hash-based schemes, such as Winternitz variants.

Ethereum co-founder Vitalik Buterin has shared a quantum resistance roadmap for the ecosystem.

This follows the identification of post-quantum readiness as a critical consideration in several areas of development.

Quantum security upgrades

In a post shared on social media, Buterin outlined specific parts of the network that may face vulnerabilities due to advances in quantum computing, including consensus-layer BLS signatures, data availability systems using KZG commitments and proofs, third-party account signatures based on ECDSA, and application-layer zero-knowledge proofs such as KZG or Groth16.

He then proposed technical approaches to address these risk areas as part of a roadmap for quantum resistance. For example, he proposed strengthening consensus layer security by swapping BLS signatures for hash-based options such as Winternitz variants, while using STARK-based aggregation to enable fast verification.

Buterin explained that this is because the move to streamlined consensus and finality could reduce the number of signatures required per slot, potentially eliminating the need for early-stage aggregation.

As part of this process, the network should also choose a long-term hashing method, choosing from several available options to ensure strong, reliable security in the future.

The Ethereum developer also proposed changing how the protocol stores and shares data in the system by introducing a newer method designed to improve security in the long term. However, he noted that this adjustment would require additional technical work to handle larger verification processes.

You might also like:

Protocol level adjustments

For externally owned accounts, Buterin wants to introduce native account abstraction via EIP-8141, a change that would allow them to support multiple signature methods, including those designed to withstand quantum threats.

Current verification of ECDSA signatures costs approximately 3000 gas, while quantum-resistant alternatives are much more resource intensive and may require approximately 200,000 gas. Despite being expensive, he believes continued improvements are expected to make them more efficient.

Furthermore, in the long term, the protocol plans to use aggregation techniques that combine many signatures into a single verification step to reduce overall network load.

The road map too discusses proof systems, which play a role in validating transactions and applications on Ethereum. While existing ZK-SNARK verifications are relatively efficient, quantum-resistant STARK tests come at a much higher cost.

To address this, he outlined a solution under EIP-8141 that allows multiple transaction controls to be bundled and verified via a single proof before they reach the blockchain, reducing on-chain computations and improving scalability.

Last month, the Ethereum Foundation announced that the next phase of the ecosystem will prioritize expanding network capacity while maintaining long-term security and resilience.