In a significant development for the Ethereum network, co-founder Vitalik Buterin has introduced a comprehensive roadmap aimed at bolstering quantum resistance. This initiative addresses four critical areas within Ethereum that are vulnerable to potential quantum computing threats, particularly as research in this field progresses rapidly.
Buterin specifically highlighted the vulnerabilities associated with the consensus-layer BLS signatures, KZG-based data availability, EIP-1559 accounts utilizing ECDSA signatures, and certain zero-knowledge proof systems. He cautioned that substantial quantum risks could materialize as early as 2028, prompting Ethereum developers to proactively implement changes before these threats become a reality.
The first area of focus is the validator signatures used in the consensus layer, which currently depend on BLS signatures. Buterin proposes transitioning to hash-based signatures within a new framework dubbed the “Lean” model. This shift would allow for significantly fewer signatures per slot, ranging from 256 to 1,024, thereby simplifying aggregation in the early phases of implementation.
On the data availability front, Ethereum presently utilizes KZG commitments for managing erasure-coded blobs. While KZG”s linearity supports advanced sampling techniques, it falls short compared to the capabilities of STARKs, which do not offer the same properties. To optimize performance, Ethereum may pivot towards 1D PeerDAS sampling, steering clear of complex 2D sampling methods.
Moreover, Buterin pointed out that externally owned accounts still rely on ECDSA, which is particularly vulnerable to quantum attacks. The proposed remedy involves the implementation of native account abstraction via EIP-8141, which integrates validation frames within transactions. This approach aims to facilitate the long-term solution of recursive signature aggregation at the protocol level, compressing numerous checks into a single proof and minimizing gas costs.
Additionally, Buterin revealed that the verification costs for standard zero-knowledge proofs (ZK-SNARKs) currently range between 300,000 to 500,000 gas units, while quantum-resistant STARK proofs could require up to 10 million gas units. This disparity poses challenges for privacy protocols and Layer 2 systems. To address this, a single master proof could validate thousands of signatures or proofs in one transaction, enhancing efficiency.
Buterin also proposed an innovative mempool-layer model, where new valid transactions could be forwarded every 500 milliseconds alongside a proof validating them. This strategy aims to streamline the proofing process, reducing the overhead to one proof per 500 milliseconds.
Despite the theoretical nature of quantum risks at present, Ethereum”s early actions reflect a commitment to future-proofing the network against emerging threats. The transition away from BLS, KZG, and ECDSA will necessitate various protocol upgrades, but it is crucial to note that a finalized roadmap has yet to be established. Current proposals are regarded as preliminary drafts, awaiting broader consensus among researchers and developers.
