The Ethereum Foundation has set a deadline of December 2029 to achieve quantum resistance across core Ethereum functions, aiming to shield transaction processing, validator security, and data storage against future quantum attacks.

Ahead of the 2027 Hegota upgrade, the Protocol Cluster released a unified tier list evaluating 62 Ethereum Improvement Proposals, reflecting broad expert input from roughly 60 contributors.

Ethereum’s 2026 protocol priorities focus on preparing for a post-quantum era, with 2029 targeted for core infrastructure and a shift from discussion to active implementation.

SHRINCS’s stateful signatures require non-reuse of one-time signing keys, making backups and old device restorations potentially risky for funds.

Observed PQC-related latency is generally minimal in practice; while initial tests suggested small desktop delays, PQC key exchange is typically cheap, with some regressions on mobile or low-bandwidth connections.

The current bottlenecks lie in signatures and certificate formats; post-quantum certificate issuance and verification are not universal yet, with new formats like Merkle Tree Certificates under development to handle larger signature sizes.

Security teams are advised to automate certificate renewals, patch libraries to close side-channel and timing leaks (e.g., KyberSlash), and plan gradual migrations of signatures and certificates in tandem with ongoing key exchanges.

Cryptographic agility is essential; organizations should maintain an adaptable procurement process and an inventory of cryptographic assets, dependencies, and supported algorithms across products and platforms.

Ordinary externally owned accounts are the most at risk due to exposed keys after their first transaction, with risk levels rising or falling based on migration progress and whether keys are held by exchanges or in self-custody.

Proposed mitigations include preventing new vulnerable outputs while retaining legacy ones, rate-limiting, temporary locks with re-enable, commit-delay-reveal techniques, and recovery methods using zk-STARKs or HD-wallet lifts, plus dual-signature or market-driven opt-in migrations.

Hybrid approaches combining post-quantum and classical cryptography offer a path for gradual migration tailored to organizational needs.

Dormant coins in quantum-vulnerable outputs pose an unresolved challenge if holders lose access to keys or fail to upgrade.