Researchers on the Ethereum Research forum have outlined a practical pathway for post-quantum signature verification in Ethereum Virtual Machine (EVM) wallets, proposing an optimized design based on the SPHINCS family of hash-based signatures. The approach aims to make quantum-resistant authentication feasible within Ethereum’s current technical and cost constraints.
Post-Quantum Security for EVM Wallets
The proposal explores how to verify post-quantum signatures in EVM-based wallets using an optimized SPHINCS-style scheme. SPHINCS and its successor SPHINCS+ are stateless, hash-based signature constructions designed to resist attacks from quantum computers. Unlike traditional elliptic-curve signatures used by most Ethereum wallets today, hash-based signatures are not known to be vulnerable to Shor’s algorithm, a key quantum threat to public-key cryptography.
While hash-based signatures are larger and typically more computationally intensive, the research focuses on parameter choices and implementation strategies that could reduce verification costs and make the approach viable for on-chain use.
Why It Matters
Most Ethereum wallets rely on elliptic-curve cryptography (e.g., ECDSA over secp256k1), which could be compromised by sufficiently powerful quantum computers. Preparing quantum-resistant alternatives is a long-term security priority for blockchain networks. A practical verification path for SPHINCS-based signatures would offer:
- Quantum resilience: Hash-based security assumptions are among the most conservative in post-quantum cryptography.
- EVM compatibility: A design focused on gas efficiency and storage constraints could enable deployment without protocol-breaking changes.
- Migration options: The approach could complement wallet upgrades and account abstraction initiatives to support new signature schemes.
Key Considerations
The research highlights familiar trade-offs in post-quantum adoption:
- Signature size and gas costs: Larger signatures increase on-chain data and fees, requiring careful optimization.
- Verification performance: Hash-based schemes demand more computation than ECDSA, impacting user experience and contract design.
- Compatibility: Introducing new signature types must account for existing address formats, wallet infrastructure, and smart contract expectations.
What’s Next
The proposal invites community feedback, benchmarking, and further engineering work to validate performance and security in real-world conditions. If refined, it could inform future development efforts and potential standardization proposals aimed at bringing post-quantum signature verification to Ethereum wallets.