The Ethereum Foundation has set December 2029 as a deadline to achieve quantum resistance across core Ethereum functions—transaction processing, validator security, and data storage—aiming to protect against quantum attacks at Q-day when quantum computers could break public-key cryptography.

Ahead of the Hegota upgrade slated for 2027, the Protocol Cluster released a unified tier list evaluating 62 Ethereum Improvement Proposals, reflecting broad expert input from around 60 contributors.

Ethereum’s 2026 protocol priorities focus on preparing for a post-quantum era, with a shift from discussion to implementation and a 2029 target for core infrastructure hardening.

Observers note that the practical latency impact of post-quantum cryptography is minimal, with initial desktop latency rises being short-lived and PQC key exchanges remaining cheap, though mobile and low-bandwidth connections can see more noticeable regressions.

Cryptographic agility is essential as standards evolve; organizations should inventory cryptographic assets, dependencies, and supported algorithms across products and platforms to enable adaptable procurement.

Security teams are advised to automate certificate renewals, monitor and patch libraries to close side-channel leaks, and plan for gradual migration of signatures and certificates alongside key exchanges.

Risk exposure centers on ordinary EOAs due to exposed keys, followed by high-value operational keys, governance/upgrade keys, and validator keys; migration progress and storage location (exchanges vs. self-custody) shape risk.

Current bottlenecks include signatures and certificate formats; post-quantum certificate issuance and verification are not yet universal, with new formats like Merkle Tree Certificates under development to handle larger signature sizes.

Alternative approaches under discussion include preventing new vulnerable outputs while allowing legacy ones, temporary locks with re-enable mechanisms, and rate-limiting or commit-delay-reveal techniques to protect spends until confirmation.

Hybrid approaches combining post-quantum and classical cryptography are viewed as a practical path for gradual migration tailored to organizational needs.

Some voices argue that the current risk profile differs from past crypto failures and may not trigger systemic collapse, shaping urgency and response strategies.

Migration decisions should consider data sensitivity, regulatory and vendor dependencies, and information value timelines rather than adhering to a universal countdown.