Vitalik Buterin Reveals Ethereum’s Plan for Quantum-Resistant Security

Ethereum co-founder Vitalik Buterin has detailed how the network intends to safeguard its infrastructure against future quantum computer threats, which could eventually compromise today’s encryption standards.

In a post published Thursday on X, Buterin explained that the strategy focuses on the components most vulnerable to quantum attacks. He also described clear upgrade paths to replace existing cryptographic systems with quantum-resistant alternatives before powerful quantum machines become a practical reality.

Four Key Areas Requiring Quantum-Resistant Protection

Buterin identified four critical areas that need security upgrades.

First, BLS signatures at the consensus layer, which allow the network to agree on the next block. Second, data availability, which relies on KZG commitments to ensure that data is accurate and complete.

Third, externally owned account (EOA) signatures, which authenticate user transactions. Fourth, application-level zero-knowledge proofs, which enable private verification of transactions without revealing sensitive data.

For each of these components, Buterin outlined how Ethereum could gradually replace existing mechanisms with quantum-resistant systems.

Transitioning from BLS to Hash-Based Signatures

At the consensus level, Ethereum plans to migrate from the BLS signature scheme to hash-based signatures such as the Winternitz algorithm. In addition, STARK technology could be used to aggregate multiple signatures efficiently.

Buterin stressed that selecting the appropriate hash function is a critical decision, describing it as potentially “the last hash function choice in Ethereum’s history.” Proposed options include Poseidon2 with additional rounds, Poseidon1, and the fast, traditional BLAKE3 algorithm.

This transition would significantly strengthen signature verification against quantum-based attacks.

Upgrading Data Availability and Managing Technical Complexity

Turning to data availability, Buterin noted that Ethereum currently uses KZG-based erasure coding to ensure that data is properly stored and verified.

While transitioning to STARK-based solutions is technically feasible, he acknowledged that it would be more complex. “It’s manageable, but it requires substantial engineering effort,” he said.

As a result, Ethereum intends to implement a carefully planned migration strategy to preserve data security without compromising network performance or throughput.

Account Abstraction and Quantum-Resistant User Signatures

With regard to user accounts, Ethereum plans to expand account abstraction, enabling support for multiple signature schemes, including quantum-resistant ones.

However, Buterin pointed out that these signatures are generally larger in size and more expensive in terms of gas costs. To address this challenge, proposed solutions include recursive aggregation techniques and advanced vector-based mathematics to reduce verification costs and improve efficiency.

Zero-Knowledge Proofs: Balancing Cost and Quantum Security

Buterin also discussed zero-knowledge proofs. Traditional ZK-SNARKs typically require between 300,000 and 500,000 gas units for verification. By contrast, quantum-resistant STARKs could cost as much as 10 million gas units.

To bridge this gap, Ethereum could adopt protocol-level recursive proof aggregation, allowing multiple verifications to be compressed into a single proof. This approach would significantly reduce overall resource consumption while maintaining strong security guarantees.

Early Preparation to Secure Ethereum’s Future

As Ethereum continues to evolve, ensuring its long-term resilience is becoming increasingly critical. Although current security mechanisms remain robust, sufficiently advanced quantum computers could eventually undermine many cryptographic systems used across blockchain networks and the broader internet.

By preparing early, Ethereum developers gain the time needed to test and refine new cryptographic systems in a structured and deliberate manner, rather than reacting under pressure. Ultimately, this forward-looking strategy aims to protect user funds, strengthen privacy tools, and support the network’s long-term scalability and sustainability.