Ethereum Foundation researcher Justin Drake wants Ethereum to complete its post-quantum and “post-AI” cryptographic transition by December 2028, potentially bringing the work forward by roughly a year. Speaking at Devcon 8 in Mumbai, Drake described the date as a hope rather than a finalized protocol commitment. The Ethereum Foundation’s published target remains December 2029, making 2028 an accelerated research ambition rather than a new official deadline.
The distinction matters because Ethereum’s post-quantum migration spans multiple protocol layers and several future hard forks. In its official protocol priorities, the Foundation committed to quantum resistance across execution, consensus and data by December 2029 and said that deadline will remain in place at least until a January 2027 reassessment with outside experts. Reaching Drake’s earlier target would require compressing an already aggressive multi-fork development schedule.
Ethereum Is Rebuilding Several Cryptographic Layers
Ethereum does not face a single quantum-vulnerable component. ECDSA secures ordinary user accounts, BLS signatures authenticate validator consensus, KZG commitments support data availability, and several proof systems rely on elliptic-curve constructions. A complete post-quantum transition therefore requires coordinated replacements across account authentication, validator signatures, data commitments and proof infrastructure rather than one cryptographic patch.
For user accounts, Ethereum is pursuing cryptographic agility through native account abstraction. EIP-8141, currently associated with the Hegotá roadmap, would allow accounts to adopt alternative authentication mechanisms without requiring a new hard fork for every signature scheme. That makes the planned upgrade an early part of a broader transition already reflected in Ethereum’s post-Hegotá security roadmap. Wallet migration could consequently occur progressively instead of forcing every Ethereum account to change signatures simultaneously.
Consensus presents a different problem because Ethereum currently depends on aggregatable BLS validator signatures. The Foundation is developing leanXMSS, a hash-based signature design, alongside leanVM to aggregate the larger post-quantum proofs efficiently. Ethereum has also moved away from Poseidon toward established hashes such as SHA or BLAKE as advances in proof systems reduced the performance advantage of specialized SNARK-friendly hashing. The current direction favors minimizing structured cryptographic assumptions where practical rather than simply replacing elliptic curves with another complex primitive.
That strategy differs from treating NIST-standardized ML-DSA or ML-KEM as Ethereum’s confirmed replacements. Both remain important post-quantum standards, but Ethereum’s published consensus work currently emphasizes hash-based constructions such as leanXMSS and leanSPHINCS. NIST standards provide relevant cryptographic options, while Ethereum’s actual protocol choices remain an active engineering and governance process.
“Post-AI” Describes a Different Worst-Case Risk
Drake’s use of “post-AI” extends the threat model beyond quantum hardware. He has argued that sufficiently capable AI systems could accelerate mathematical research and potentially discover classical algorithms that weaken structured cryptography before a cryptographically relevant quantum computer exists. In October, he described a worst-case ECDSA breakthrough as potentially arriving within “months, not years.” That timeline is Drake’s precautionary assessment, not evidence that ECDSA has been broken or that a practical attack currently exists.
The warning prompted a broader debate after Drake urged large holders to prepare controlled migration plans toward addresses whose public keys remain hidden behind hashes. Vitalik Buterin subsequently backed the precautionary logic while warning against rushed migrations, a debate examined in Ethereum’s recent “bunker mode” discussion. The immediate issue is migration readiness rather than an active cryptographic compromise.
Ethereum Foundation estimates also require careful interpretation. Its post-quantum documentation puts the network’s comparable long-dormant or abandoned-fund exposure near 0.1%, but explicitly says this is not Ethereum’s total quantum exposure. Accounts that have previously transacted can expose their public keys and would eventually need quantum-safe authentication. The small dormant-fund estimate therefore makes abandoned assets easier to manage than on some networks, but it does not mean only 0.1% of Ethereum is cryptographically exposed.
Ethereum has already created a dedicated Post-Quantum Security team, runs recurring interoperability work and maintains staged milestones for post-quantum keys, signature verification, attestations and aggregation. The broader strategy has also become a central part of Ethereum’s long-term post-quantum and AI-verification roadmap. Drake’s December 2028 target raises the ambition of that program, but the next formal decision point remains the Foundation’s January 2027 reassessment rather than an already-approved acceleration of mainnet upgrades.
