Ethereum cofounder Vitalik Buterin has weighed in on a growing debate over post-quantum cryptography, supporting Ethereum’s hash-based approach while leaving the door open for lattice-based solutions in the future.
The discussion on X brought together prominent blockchain figures, including Zcash cofounder Eli Ben Sasson and Delphi Labs general counsel Gabriel Shapiro, following criticism from venture capital firm a16z crypto.
The debate began when a16z crypto advocated adopting lattice-based cryptography instead of relying exclusively on hash-based systems. The firm argued that Ethereum’s proposed hash-only signature aggregation mechanism depends heavily on recursive SNARK proofs, potentially introducing additional complexity, coordination challenges, and security risks.
Ben Sasson challenged that position, warning that lattice cryptography contains mathematical structures that could become attractive targets for increasingly sophisticated artificial intelligence systems.
According to a16z crypto, although hash-based cryptography is generally considered conservative and secure, relying on it exclusively could introduce vulnerabilities through complicated implementation requirements.
Shapiro defended Ethereum’s existing strategy, arguing that its hash-based cryptographic roadmap remains the most practical option for the network. However, he suggested that lattice-based signatures could eventually be supported for Ethereum accounts and wallets if their security against AI-assisted attacks is established.
Buterin endorsed Shapiro’s position, highlighting Ethereum Improvement Proposal EIP-8288 as a potential long-term solution for supporting multiple cryptographic signature schemes.
Under the proposed approach, users could generate signatures locally, convert them into STARK proofs, and submit those proofs through an aggregation mechanism without requiring additional on-chain calldata.
Buterin suggested that such a framework could eliminate the need for Ethereum to introduce new cryptographic precompiles whenever alternative signature algorithms emerge.
Ben Sasson subsequently agreed, describing the proposal as the appropriate direction for Ethereum.
The debate comes as Ethereum accelerates preparations for quantum-resistant blockchain security.
Ethereum currently relies on BLS signatures, which allow thousands of validator signatures to be combined efficiently. However, BLS cryptography is vulnerable to sufficiently powerful quantum computers, making its eventual replacement a major priority.
Ethereum’s Lean consensus roadmap proposes replacing BLS with hash-based signatures, potentially using Winternitz variants, while employing STARK technology for efficient signature aggregation.
Buterin has also discussed EIP-8141, which would introduce native account abstraction and allow Ethereum accounts to support different signature algorithms.
Together, these developments highlight Ethereum’s effort to strengthen long-term network security while maintaining flexibility as quantum computing and cryptographic technologies evolve.
