Vitalik Buterin Unveils Ethereum’s Complete Roadmap for Quantum Resistance

Buterin suggests replacing BLS consensus layer signatures with hash-based schemes, such as the Winternitz variant.

Ethereum founder Vitalik Buterin shared the ecosystem’s quantum resistance roadmap.

This follows the identification of post-quantum readiness as an important consideration in many areas of development.

Quantum Security Development

In a post shared on social media, Buterin pointed out some parts of the network that may be vulnerable to the development of quantum computing, including BLS consensus signatures, data availability systems that use KZG bonds and proofs, external account signatures based on ECDSA, and application-layer zero-knowledge such as KZG proofs or KZG proofs.

He went on to propose technical ways to deal with these dangerous areas as part of the road to quantum resistance. For example, he suggested strengthening the security of the consensus layer by replacing BLS signatures with hash-based options such as the Winternitz variant, while using STARK-based encryption to enable faster verification.

Buterin explained that this is because the shift to less consensus and termination may reduce the number of signatures required per site, potentially eliminating the need for integration in the early stages.

As part of this process, the network will also need to choose a long-term hashing method, choosing from several options available to ensure strong, reliable security in the future.

Ethereum’s developer has also proposed changing the way the protocol stores and shares data across the system by introducing a new mechanism designed to improve long-term security. However, he noted that this amendment would require more technical work to handle the larger verification processes.

You may also like:

Protocol Level Adjustment

For foreign managed accounts, Buterin wants to introduce a native account release with EIP-8141, a change that will allow them to support multiple signing methods, including those designed to resist quantum threats.

Current ECDSA signature verification costs around 3000 gas, while other quantum-resistant methods are more resource-intensive and can require around 200,000 gas. Despite being expensive, he believes that further development is expected to make them successful.

In addition, the protocol plans to use aggregation techniques that combine multiple signatures into a single verification step over a long period of time to reduce the overall network load.

The roadmap also discusses proof systems, which play a role in validating transactions and applications on Ethereum. Similarly, while existing ZK-SNARK proofs are relatively efficient, quantum-resistant STARK proofs come at a much higher cost.

To address this, he presented a solution under EIP-8141 that will allow multiple transaction checks to be combined and verified with a single proof before accessing the blockchain, reducing on-chain calculations and improving scalability.

Last month, the Ethereum Foundation announced that the next phase of the ecosystem will prioritize increasing network capacity while maintaining long-term security and stability.