Vitalik Buterin Unveils Ethereum Roadmap for Post‑Quantum Security

It sets a phased path to cut Ethereum’s exposure to future quantum attacks by shifting critical functions to quantum‑safe designs.

Overview

Buterin’s post identifies four targets for mitigation: validator BLS signatures, KZG‑based data availability, ECDSA wallet signatures, and certain application ZK proofs.
He proposes moving validators to hash‑based signatures and using STARKs to aggregate many attestations into compact verifiable sets.
For data availability, replacing KZG is flagged as feasible but complex because STARKs lack the linearity used in two‑dimensional sampling, pushing designs toward PeerDAS and heavy engineering work.
EIP‑8141 is positioned to enable native account abstraction with validation frames so accounts can adopt quantum‑safe signature schemes and so signatures/proofs can be recursively aggregated.
Cost pressures drive the approach: Buterin cites ~3,000 gas for ECDSA versus ~200,000 for hash‑based signatures and ~300k–500k for SNARKs versus ~10M for quantum‑resistant STARKs, with mempool‑level proving on short ticks and an Ethereum Foundation post‑quantum program, including a seven‑fork Strawmap through 2029.