So you wanna Post-Quantum Ethereum transaction signature
Thanks to Vitalik Buterin, Justin Drake, Renaud Dubois, Marius Van Der Wijden and Zhenfei Zhang for fruitfull discussions.
Introduction
2024 wi...

<div><h1><a href="https://ethresear.ch#p-51834-so-you-wanna-post-quantum-ethereum-transaction-signature-1" rel="nofollow"></a>So you wanna Post-Quantum Ethereum transaction signature</h1><p><em>Thanks to Vitalik Buterin, Justin Drake, Renaud Dubois, Marius Van Der Wijden and Zhenfei Zhang for fruitfull discussions.</em></p><h2><a href="https://ethresear.ch#p-51834-introduction-2" rel="nofollow"></a>Introduction</h2><p>2024 will probably be remembered as one of the years marking the acceleration of the quantum computer menace. Google, under its CEO Sundar Pichai, finally unveiled its quantum chip, Willow, via a <a href="https://x.com/sundarpichai/status/1866167429367468422" rel="nofollow">loud tweet</a>!</p><p>Scott Aaronson, one of the most famous quantum experts in the world, has changed his message to people asking whether they should be worried about quantum computers. He <a href="https://scottaaronson.blog/?p=8329" rel="nofollow">shifted from saying</a></p><blockquote><p>… Maybe, eventually, someone will need to start thinking about migrating from RSA, Diffie-Hellman, and elliptic curve cryptography to lattice-based crypto or other systems that could plausibly withstand quantum attacks,…</p></blockquote><p>to</p><blockquote><p>Yes, unequivocally, worry about this now. Have a plan.’</p></blockquote><p>Vitalik has already written about <a href="https://ethresear.ch/t/how-to-hard-fork-to-save-most-users-funds-in-a-quantum-emergency/18901/1" rel="nofollow">how to hard-fork to save most users’ funds in a quantum emergency</a>. Also, few days ago, he highlighted in a <a href="https://x.com/3orovik/status/1867754730136731923" rel="nofollow">podcast</a> the four main Ethereum components potentially vulnerable to quantum attacks. They are:</p><ol><li>Ethereum transaction signatures (notably using <strong>ECDSA</strong>)</li><li><strong>BLS</strong> signatures in consensus</li><li>Data Availability Sampling (leveraging <strong>KZG</strong> commitments)</li><li>Verkle trees (if shipped with <strong>Bandersnatch</strong>)</li></ol><p>An attentive reader might have noticed that these four points have something in common—yes, it’s my <em>beloved</em> elliptic curves. Unfortunately, the discrete logarithm problem for elliptic curves (ECDLP) is broken by Shor’s Algorithm, a famous quantum algorithm.</p><p>In this short note, we are going to analyze a possible post-quantum replacement for the first point, namely a potential <strong>post-quantum Ethereum transaction signature</strong>.</p><h2><a href="https://ethresear.ch#p-51834-which-pq-signature-3" rel="nofollow"></a>Which PQ signature?</h2><p>Now, a legitimate question is: <em>which post-quantum (PQ) signatures should we use?</em> Fortunately, we don’t need to overthink this too much if we had to choose right now. Zhenfei Zhang, a former Ethereum Foundation cryptographer, has already written about the <a href="https://crypto.ethereum.org/blog/nist-pqc-standard" rel="nofollow">NIST Post-Quantum Cryptography Standardization Process</a>. If we analyze the three possible signature choices (two of which leverage lattice-based cryptography), it’s clear (at least for now) that Falcon appears to be the most promising candidate. The computation for the verifier should be roughly the same as other lattice-based signature schemes (like Dilithium), i.e., bounded by an FFT. However, <a href="https://falcon-sign.info/" rel="nofollow">Falcon</a> does have a smaller signature size.</p><h2><a href="https://ethresear.ch#p-51834-ship-it-4" rel="nofollow"></a>Ship it!!!</h2><p>Now that we’ve ‘settled’ on the signature to use, the next question is: <em>how are we going to ship it?</em>  There is a big dichotomy now: one implies a hard fork, and the other doesn’t. Let’s dig a bit deeper.</p><h3><a href="https://ethresear.ch#p-51834-the-account-abstraction-way-5" rel="nofollow"></a>The Account Abstraction way</h3><p>The first approach we will discuss, arguably the most elegant and promising, involves <strong>Account Abstraction</strong> (AA). It has been advocated by Justin Drake and Vitalik on various occasions.</p><p>For people not familiar with it, AA is a proposed improvement to make the Ethereum ecosystem more flexible and user-friendly by changing how transactions and accounts are managed. It shifts certain functionalities traditionally reserved for externally owned accounts (EOAs) into smart contracts, effectively “abstracting” the differences between EOAs and smart contract accounts.<br>Ethereum developers have introduced various proposals for implementing AA, including <a href="https://eips.ethereum.org/EIPS/eip-4337" rel="nofollow">ERC-4337</a>. This is a practical solution that achieves AA without requiring a consensus-layer upgrade. It uses a mechanism called <em>User Operation</em> objects and introduces a separate <em>Bundler</em> layer to handle transactions.</p><p>Adding <strong>Falcon as the Ethereum transaction signature in this scenario means coding a Falcon verifier contract</strong> that is responsible for verifying the validity of <em>User Operation</em> objects before they are executed by the <em>Entry Point</em> contract.<br>Now, this may sound like all sunshine and rainbows, but there is at least one substantial underlying issue. Coding Falcon in Solidity might not be the best experience (and it’s probably quite gas-costly). On top of that, there are even nastier problems, such as the fact that Falcon deals with 13-bit numbers, while Solidity only supports U256. The latter is the kind of issue that could be addressed by adding <a href="https://eips.ethereum.org/EIPS/eip-616" rel="nofollow">SIMD</a> and <a href="https://eips.ethereum.org/EIPS/eip-6690" rel="nofollow">EVMMAX</a> to the EVM.</p><ul><li><strong>Pros:</strong> Elegant.</li><li><strong>Cons:</strong> Gas costly.</li></ul><h3><a href="https://ethresear.ch#p-51834-the-hard-fork-way-6" rel="nofollow"></a>The hard fork way</h3><p>The method we discuss here is probably the simplest technically. It is inspired by previous work done by Marius Van Der Wijden and essentially involves introducing a <strong>new <a href="https://eips.ethereum.org/EIPS/eip-2718" rel="nofollow">transaction type</a> signed with Falcon signatures</strong> <a href="https://eips.ethereum.org/EIPS/eip-7591" rel="nofollow">instead of BLS signatures</a>. The biggest problem here is that, by doing so, we are tightly bound (through a new EIP) to a favored master signature scheme.<br>So, to recap this approach</p><ul><li><strong>Pros:</strong> It is an elegant and flexible solution.</li><li><strong>Cons:</strong> It is costly in terms of gas consumption.</li></ul><h3><a href="https://ethresear.ch#p-51834-hybrid-7" rel="nofollow"></a>Hybrid</h3><p>A really tempting approach would be to take the best of the two methods above and combine them into a single one. In a nutshell, we could leverage AA in a similar way that <a href="https://github.com/ethereum/RIPs/blob/5dbad75fcc9aabf3021e176818aa8d256293d460/RIPS/rip-7212.md" rel="nofollow">RIP-7212</a> does, but of course, we would need a <strong>new RIP for Falcon</strong>. This might provide the time to experiment with the feature in rollups and determine if Falcon is truly the way to go. However, it is important to note that this approach does not solve the original problem of introducing a new signature scheme at the L1 level.</p><ul><li><strong>Pros:</strong> Easy to code and fast.</li><li><strong>Cons:</strong> Temporary (does not solve the L1 use case).</li></ul><h2><a href="https://ethresear.ch#p-51834-conclusion-8" rel="nofollow"></a>Conclusion</h2><p>The rise of quantum computing demands urgent action to secure Ethereum, particularly its transaction signatures vulnerable to Shor’s Algorithm. Falcon, a lattice-based signature scheme, emerges as a strong candidate due to its efficiency and compact size. Deployment strategies, including Account Abstraction, hard forks, or a hybrid approach, each offer distinct benefits and trade-offs. A careful evaluation is essential to ensure Ethereum remains robust against quantum threats while maintaining scalability and usability.</p></div>

So you wanna Post-Quantum Ethereum transaction signature

Vì vậy, bạn muốn ký giao dịch Ethereum sau Lượng tử
Cảm ơn Vitalik Buterin, Justin Drake, Renaud Dubois, Marius Van Der Wijden và Zhenfei Zhang về những cuộc thảo luận có ích.
Giới thiệu
2024 sẽ...

<Account Abstraction>cách trừu tượng hóa tài khoản</Account Abstraction>
<Bit>Bit</Bit>
<Block>Block</Block>
<Consensus>Consensus</Consensus>
<Fork>Fork</Fork>
<Gas>Gas</Gas>
<Hard Fork>Hard fork</Hard Fork>
<Short>Short</Short>
<Solidity>Solidity</Solidity>
<Use Case>Use Case</Use Case>
<Số lượng giao dịch trên mỗi giây>TPS</Số lượng giao dịch trên mỗi giây>
<Thực tế tăng cường (AR)>AR</Thực tế tăng cường (AR)>
<Thuật toán chữ ký kỹ thuật số (DSA)>DSA</Thuật toán chữ ký kỹ thuật số (DSA)>
<Đề xuất cải tiến Ethereum (EIP)>EIP</Đề xuất cải tiến Ethereum (EIP)>
<Yêu cầu bình luận Ethereum (ERC)>ERC</Yêu cầu bình luận Ethereum (ERC)>
<Máy ảo Ethereum (EVM)>EVM</Máy ảo Ethereum (EVM)>
<Intercontinental Exchange (ICE)>ICE</Intercontinental Exchange (ICE)>
<ROA>ROA</ROA>
<gas>gas</gas>
<nhà cung cấp thanh khoản>LP</nhà cung cấp thanh khoản>
<TRON>TRON</TRON>
<Amp>Amp</Amp>
<Prom>Prom</Prom>
<Vai>Vai</Vai>
<Ren>Ren</Ren>
<AVA>AVA</AVA>
<Kin>Kin</Kin>
<ETH>ETH</ETH>
<SOL>SOL</SOL>
<ALGO>ALGO</ALGO>
<HT>HT</HT>
<XEC>XEC</XEC>
<FEI>FEI</FEI>
<OP>OP</OP>
<COMP>COMP</COMP>
<ENS>ENS</ENS>
<AR>AR</AR>
<ONT>ONT</ONT>
<AMP>AMP</AMP>
<ACH>ACH</ACH>
<PLA>PLA</PLA>
<RON>RON</RON>
<REQ>REQ</REQ>
<ONG>ONG</ONG>
<rollups>rollups</rollups>
<Ink>Ink</Ink>

Vì vậy, bạn muốn chữ ký giao dịch Ethereum sau lượng tử

Một nhà giao dịch đã kiếm được khoản lợi nhuận lên đến 8.36 triệu USD chỉ trong 20 phút bằng cách giao dịch token Pudgy Penguins (PENGU).
Thực hiện liên tiếp 500 giao dịch PENGU
Theo ghi nhận BeInCryp...

Mất 20 phút và kiếm được 8.36 triệu USD nhờ giao dịch PENGU

Binance vừa chính thức ra mắt Binance Alpha, một nền tảng mới tích hợp trong Binance Wallet, nhằm giới thiệu các dự án tiền điện tử giai đoạn đầu đầy tiềm năng trong hệ sinh thái Web3. Introducing Bin...

Binance công bố tính năng mới Binance Alpha giúp tổng hợp và chọn lọc các dự án nổi bật

Binance vừa công bố Lượt 1 với 5 dự án đầu tiên trong tính năng Binance Alpha của mình. Lượt 2 sẽ được công bố tiếp vào 19 giờ theo giờ Việt Nam. Binance Alpha chính thức công bố danh sách 5 dự án mới...

Vì vậy, bạn muốn chữ ký giao dịch Ethereum sau lượng tử

Tải app và tham gia các sự kiện có thưởng