Vitalik Buterin Unveils Ethereum’s Comprehensive Quantum Resistance Roadmap

Buterin proposes replacing consensus-layer BLS signatures with hash-based schemes, such as Winternitz variants.

Ethereum co-founder Vitalik Buterin has shared a quantum resistance roadmap for the ecosystem.

This follows the identification of post-quantum readiness as a critical consideration across several areas of development.

Quantum Security Upgrades

In a post shared on social media, Buterin outlined specific parts of the network that could face vulnerabilities from advances in quantum computing, including consensus-layer BLS signatures, data availability systems using KZG commitments and proofs, externally owned account signatures based on ECDSA, and application-layer zero-knowledge proofs such as KZG or Groth16.

He went on to propose technical approaches to address these risk areas as part of a quantum resistance roadmap. For example, he suggested strengthening consensus-layer security by swapping BLS signatures for hash-based options like Winternitz variants, while using STARK-based aggregation to enable quick verification.

Buterin explained that this is because the transition toward lean consensus and finality could reduce the number of required signatures per slot, potentially eliminating the need for aggregation in early stages.

As part of this process, the network would also need to choose a long-term hashing method, selecting from several available options to ensure strong, reliable security in the future.

The Ethereum developer also suggested changing how the protocol stores and shares data across the system by introducing a newer method that is designed to improve long-term security. However, he noted that this adjustment would require additional technical work to handle larger verification processes.

You may also like:

Protocol-Level Adjustments

For externally owned accounts, Buterin wants to introduce native account abstraction through EIP-8141, a change that would allow them to support multiple signature methods, including those designed to withstand quantum threats.

Current ECDSA signature verification costs about 3000 gas, while quantum-resistant alternatives are far more resource-intensive and could require around 200,000 gas. Despite being expensive, he believes that ongoing improvements are expected to make them more efficient.

Additionally, the protocol plans to use aggregation techniques that combine many signatures into a single verification step in the long term to reduce the overall network load.

The roadmap also discusses proof systems, which play a role in validating transactions and applications on Ethereum. Similarly, while existing ZK-SNARK verifications are relatively efficient, quantum-resistant STARK proofs come with much higher costs.

To address this, he outlined a solution under EIP-8141 that would allow multiple transaction checks to be bundled and verified through a single proof before reaching the blockchain, reducing on-chain computation and improving scalability.

Last month, the Ethereum Foundation announced that the ecosystem’s next phase will prioritize expanding network capacity while maintaining long-term security and resilience.