Ethereum is preparing to address future security threats with the introduction of EIP-8288, a proposal that could significantly enhance the network’s ability to withstand quantum computing attacks. The proposal, championed by Ethereum co-founder Vitalik Buterin, aims to make post-quantum cryptography more affordable and efficient across the Ethereum blockchain.
Buterin aims to add EIP-8288 to I-Star upgrade
Vitalik Buterin recently highlighted the significance of EIP-8288, which proposes the use of recursive STARK aggregation for cryptographic signatures and proofs. In a recent post on X, Buterin suggested including EIP-8288 in the upcoming I-Star upgrade, which follows the Hegota fork and is regarded as the next stage after the Frames update.
Buterin expressed his anticipation for the upgrade with the statement:
“I hope EIP-8288 can be included in I-star, the fork after Hegota. I see this as the next step after Frames.”
The timing of this proposal aligns with the Ethereum Foundation’s recent announcement of a December 2029 target to achieve quantum resistance for Ethereum’s execution, consensus, and data layers. The Foundation referred to this timeframe as “non-negotiable” at least until January 2027, underscoring the urgency for quantum-safe progress.
Ethereum is an open-source, decentralized blockchain platform known for its robust smart contract capabilities and ongoing efforts to enhance network security and scalability.
EIP-8288’s approach: Lowering cryptographic costs with recursive STARKs
The draft for EIP-8288 introduces lightweight dependency frames in transactions, which contain details about associated signatures or proofs. Rather than verifying each cryptographic object individually on-chain, Ethereum’s mempool could aggregate these dependencies using a single recursive STARK proof. This would streamline verification and provide improved efficiency for post-quantum operations.
Buterin has stated that quantum-safe private transactions—which currently require about 10 million gas—could see their costs reduced to just tens of thousands of gas under this system.
Quantum-safe applications could become much more accessible, with private transactions dropping from approximately 10 million gas to the low tens of thousands.
The proposal also envisions support for new cryptographic signature and proof schemes without needing separate Ethereum Virtual Machine (EVM) upgrades for each.
Under EIP-8288, mempool nodes would aggregate transaction dependencies and generate recursive STARK proofs, allowing block builders to assemble proofs covering the dependencies of all transactions within a block. The block structure would feature a single recursive STARK proof demonstrating the validity of these dependencies, removing the need to store or verify all individual user signatures and proofs directly on-chain.
EIP-8288 describes the dependency data as 96-byte statements and details a recursive STARK at the block level to ensure efficiency.
Despite the promise of EIP-8288, it remains a draft and has yet to be integrated into Ethereum’s live protocol. Further research, implementation efforts, and consensus among developers will determine whether it becomes part of a future network upgrade.
Mini dictionary: Recursive STARKs, or Scalable Transparent ARguments of Knowledge, are a type of zero-knowledge proof that enable efficient, scalable validation of complex computations. Recursive aggregation allows multiple proofs to be bundled into a single proof, making verification much faster and reducing on-chain computation costs.
