As reported by Wu Blockchain, Ethereum Foundation privacy project Kohaku lead Nico said Ethereum can begin preparing accounts for the post-quantum era today without requiring a hard fork.

According to Nico, the proposed account-level solution costs approximately $0.07 per account to deploy. The design has completed an initial review with Fable, with additional audits planned.

"Ethereum can already start preparing accounts for a post quantum world, without waiting for a hard fork. Today, it would be just $0.07. Further audits incoming. Though I squeezed in a review with Fable before Uncle Sam crashed my party. Verity formal proof included for my lean enjoyers," Kohaku tweeted.

Ethereum Researcher Says Post-Quantum Account Protection Can Be Implemented Today for $0.07

Ethereum Foundation privacy project Kohaku lead Nico said Ethereum can begin preparing accounts for the post-quantum era today without requiring a hard fork. According to Nico, the… pic.twitter.com/bsKzN8mcYX

Quantum computers will eventually break ECDSA, the signature scheme that secures Ethereum and Bitcoin accounts today. Recent resource estimates by Babbush et al. bring this timeline closer than previously expected, making post-quantum signature verification at the execution layer an urgent problem.

Then comes SPHINCS-

Ethereum researchers are proposing SPHINCS-, which introduces efficient Stateless Post-Quantum Signature Verification on the EVM.

SPHINCS+ variants, a family of EVM-optimized variants, are derived from SPHINCS+ and from recent work on compact hash-based signatures. The goal remains simple: to minimize pure on-chain verification cost without relying on a precompile or a protocol change.

Ethereum researchers suggest that a Solidity implementation of a SPHINCS variant, aligned with NIST's draft for limited-signature parameter sets, can already verify a standardized-style post-quantum signature on Ethereum at practical cost (150K gas). A formal proof of the verifier is provided using Lean 4 with Verity.

More aggressive non-standard variants that replace the standard hash components with an EVM-native keccak-based construction and reduce the signature budget to the range relevant for blockchain wallets will consequently be explored. Across these variants, the trade-off between verifier gas, signer work, signature size, and per-key signature budget is studied.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。