Ethereum developers have proposed the first concrete infrastructure change to harden the network's $100 billion-plus staking layer against future quantum attacks. The proposal centers on rebuilding the deposit contract that every validator uses to enter staking, addressing a critical bottleneck in the current system. The current deposit contract is tuned to the BLS12-381 elliptic-curve scheme, which assumes fixed sizes of 48-byte public keys and 96-byte signature metadata. However, this hardcoded footprint leaves no room for post-quantum (PQ) key formats, which are typically much larger. The proposed replacement removes this bottleneck by allowing validator keys and credential metadata up to 8,192 bytes each, with each deposit required to declare a "credential scheme" (scheme 0 remains BLS). The contract supports three operational modes—disabled, BLS enabled, and BLS retired—and includes an irreversible retirement pathway, ensuring BLS onboarding can't be re-enabled once retired.
The proposal passes deposit data to the consensus layer while intentionally leaving cryptographic definitions to future work, allowing the contract to accept larger keys without prematurely committing to a particular PQ algorithm. Turning this into reality will require a coordinated fork across both the execution and consensus layers. The pull request is currently a draft in the EIP repo, awaiting editorial review, with critical deployment details—contract address, deployment code, and activation timestamps—undecided. The Ethereum Foundation set up a team last year to plan a post-quantum transition, with a May report from quantum-security firm Project Eleven estimating better-than-even odds of a machine capable of breaking elliptic-curve signatures by 2033, with 2030 possible. According to that analysis, more than 65% of all ETH sits in addresses whose public keys are already exposed on-chain—heightening the potential attack surface if PQ-capable machines arrive.
The PQ landscape remains unsettled, with one of the proposal's authors, Thomas Coratger, emphasizing that Bitcoin and Ethereum are "heavily leaning" toward hash-based signatures because they rely on assumptions the networks already trust. Stateless hash-based schemes standardized by NIST run to roughly 8 KB per signature/key—precisely the ceiling this deposit contract sets—while smaller "compact" alternatives carry counters that, if misused, can leak private keys. Moving to post-quantum cryptography involves trade-offs in size, statefulness, and operational complexity. The next milestones are clear—specify the PQ schemes, secure EIP consensus, and coordinate a fork across both layers—while the broader crypto community resolves which post-quantum primitives to adopt.
