Ethereum co-founder Vitalik Buterin has laid out a roadmap to harden the protocol against future quantum threats, focusing on four parts he considers most exposed: validator signatures, data storage, user account signatures, and zero-knowledge proofs.
For consensus validator signatures, Buterin recommends moving away from BLS and adopting “lean” hash-based, quantum-safe signatures. He stresses that choosing the hash function for this approach is critical because it will likely be a very long-lived decision — potentially the last hash function Ethereum adopts — and careful selection is needed to avoid future regret.
On data availability and stored blobs, Ethereum currently relies on KZG commitments. Buterin favors a transition toward STARK-based constructions, which are believed to be quantum-resistant. That migration is nontrivial and would demand substantial engineering work to add tooling, optimize performance, and ensure smooth interoperability with existing systems.
User accounts today commonly use ECDSA. The roadmap proposes enabling accounts to accept arbitrary signature schemes so wallets can migrate to quantum-safe primitives such as lattice-based signatures. Those post-quantum schemes are currently much heavier computationally and would raise gas costs if used naively. Buterin points to a longer-term remedy: protocol-level recursive signature and proof aggregation that would compress many expensive signatures down to compact onchain verifications, reducing per-transaction overhead.
Zero-knowledge proofs are another pain point: quantum-resistant ZK proofs remain costly to verify directly onchain. The proposed response echoes the account strategy — use recursion and aggregation so a single master proof, or a small number of “validation frames,” can attest to the correctness of many signatures and proofs at once. Blocks could include multiple such frames, each containing compact aggregated signatures or larger aggregated proofs, keeping onchain verification costs manageable.
Buterin referenced earlier proposals such as Justin Drake’s “Lean Ethereum” and noted the Ethereum Foundation’s Strawmap, and he expects continued protocol improvements like shorter slot and finality times as development progresses. Overall, the roadmap presents feasible technical paths but highlights hard engineering and design choices ahead, particularly around hash-function selection, building STARK tooling, and implementing robust recursive aggregation schemes to make Ethereum resilient to quantum-capable adversaries.