Ethereum Protocol Cluster Unveils Ambitious Post-Quantum Roadmap and Fork Strategy

In May, the Ethereum Protocol cluster welcomed a trio of new cluster coordinators, signaling a strategic shift towards defining and executing the network’s long-term developmental trajectory. Following a period of extensive internal alignment and ecosystem-wide consultation, the cluster has now publicly articulated its core priorities, outlining its fundamental purpose, the guiding commitments through 2029, and the specific requirements for upcoming protocol upgrades. This comprehensive plan aims to solidify Ethereum’s resilience against future threats, particularly the advent of quantum computing, while simultaneously advancing its capabilities in areas such as privacy, scalability, and efficiency.

The announcement comes as the Ethereum ecosystem prepares for the "Glamsterdam" upgrade, a significant milestone in its development roadmap. With Glamsterdam nearing its mainnet launch, the Protocol cluster has officially entered its "HegotÃ¡ scoping season." This critical phase, detailed in an August 28 post, involved the proposal of 62 Ethereum Improvement Proposals (EIPs), extensive retrospectives on the Glamsterdam upgrade, the development of 16 contribution templates, and numerous cluster-wide working sessions. These collaborative efforts have culminated in a shared set of priorities for approximately 60 researchers and engineers, focusing on a critical path that begins with the scoping of the HegotÃ¡ upgrade.

The overarching objective of the Ethereum Protocol cluster is to achieve quantum-resistant security across all three core layers of the Ethereum mainnet—execution, consensus, and data—by December 2029. This ambitious deadline aligns with independent migration targets set by major technology players like Google, Cloudflare, and Microsoft, all of whom are preparing for a post-quantum cryptographic landscape. While precise estimates for "Q-day," the hypothetical day when quantum computers could break current encryption standards, remain fluid, the Ethereum community is adopting a proactive stance. The current planning assumption anticipates Q-day occurring as early as 2030, a deliberately aggressive timeline designed to ensure readiness rather than react to imminent threats. This proactive approach is viewed as strategically responsible, signaling Ethereum’s long-term commitment to enduring for centuries.

This self-imposed deadline is considered non-negotiable by the Protocol cluster until at least January 2027, when advancements in quantum computing will be reassessed with the guidance of external experts. The cluster acknowledges that Ethereum’s inherent design philosophy favors a cautious, distributed approach, avoiding single points of failure or overly centralized bets. However, in the face of a potentially disruptive technological shift, this deliberate deadline represents a calculated commitment to future-proofing the network.

The Strategic Roadmap: Navigating Towards Quantum Resistance

The path to full post-quantum readiness is structured around two primary cadences leading up to December 2029. Client teams are expected to commence HegotÃ¡ implementation in late Q4 2026. Following the "July Strawmap" framework, full post-quantum readiness is projected for "L," which represents five hardforks after Glamsterdam. Achieving this timeline, with Glamsterdam shipping in December 2026 and L in December 2029, necessitates an average cadence of 7.2 months per fork. This pace is considered aggressive, allowing minimal room for unforeseen delays or complications in any given upgrade.

Recognizing the potential for complexity, an update to the Strawmap on August 19 introduced a "minimum viable post-quantum" (MV-PQ) milestone at "J." This contingency plan places the post-quantum public-key registry at "I." The crucial components for this milestone include the post-quantum heartbeat on the consensus layer, leanDA sampling on the data layer, and leanSPHINCS transactions on the execution layer, all slated for J*. By maintaining a 12-month cadence from Glamsterdam, this MV-PQ milestone can be achieved by December 2029, providing a critical safeguard.

MV-PQ is envisioned as a temporary measure to ensure Ethereum’s operational continuity through Q-day, albeit with reduced guarantees. Researchers are actively defining the exact scope of these reduced guarantees. The ultimate goal remains full resistance across all layers by December 2029, with ongoing work on post-quantum attestations essential for complete economic finality within the consensus design.

The fork order following J is designed for flexibility. The Strawmap may see K and L swapped, advancing lean consensus by one fork and mandatory execution proofs by one fork. Achieving full post-quantum readiness by December 2029 in K would imply a 9-month cadence. Currently, HegotÃ¡, I, and J are being treated as a single delivery sequence, with the final ordering to be determined as research matures and client capacity becomes clearer.

This ambitious schedule demands parallel delivery across the entire Ethereum ecosystem. The required cadence will necessitate unprecedented teamwork within the Protocol cluster and across all participating entities. Forks are expected to overlap, with HegotÃ¡ potentially shipping concurrently with the maturation of I specifications and the production of testable components from J through L* research. A linear progression of forks will not suffice to meet the December 2029 deadline. This reality underscores the need for enhanced internal communication and robust engagement with client teams, grant recipients, academic institutions, and the broader community to accelerate the research-to-mainnet pipeline. The successful delivery of post-quantum readiness will require a significant increase in human resources, encompassing cryptographers, client developers, researchers, security reviewers, and testing specialists from both within and beyond the Ethereum Foundation.

The Five Pillars of Protocol Development

To manage this complex, multi-fork undertaking, the Protocol cluster has organized its efforts around five interconnected research arcs: fast finality, post-quantum cryptography, privacy enhancements, state management, and the Zero-Knowledge Ethereum Virtual Machine (zkEVM).

Fast Finality: This arc aims to drastically reduce Ethereum’s time to finality from minutes to mere seconds. The current design direction focuses on decoupling finality from block production and restructuring the consensus layer around an "available chain" and a "finality gadget." Specifications and prototypes are actively being developed, with a target for implementation in the I* upgrade, where decoupled consensus is anticipated to be a central feature.
Post-Quantum Cryptography: As detailed in the plan, this arc is dedicated to fulfilling the December 2029 commitment by ensuring quantum resistance across consensus, data, and execution layers. Cryptographic agility is paramount for the execution layer, with native account abstraction enabling the seamless swapping of signature schemes without requiring hard forks for each new scheme. Frames, a proposed framework for native account abstraction, is central to this effort. In contrast, the consensus layer, which cannot rely on cryptographic agility, necessitates a more robust and hardened approach. Consensus cryptography will be battle-tested and solidified before rollout, with components awaiting the complete post-quantum design rather than being released piecemeal.
Privacy: The privacy arc is focused on establishing privacy as a fundamental protocol guarantee, empowering users to conduct transactions, manage balances, and interact with applications without revealing their financial history or relying on third-party trust. The initial phase aims to deliver native, trustless, and censorship-resistant private transactions on Ethereum L1, beginning with the HegotÃ¡ upgrade. Subsequent efforts will concentrate on achieving scalable post-quantum privacy and implementing encrypted mempools to obscure transaction details until their inclusion on-chain.
State Management: This arc addresses the critical challenge of preventing state growth and access from becoming a limiting factor for Ethereum. Its work encompasses migrating to a new trie structure, ensuring sustainable state growth, and facilitating decentralized access to both current and historical state data. Significant design and migration efforts are anticipated to commence with the I* upgrade and continue thereafter.
zkEVM: The zkEVM arc is transitioning the verification of execution proofs from an optional, available feature to a mandatory requirement. The ultimate goal is for validators to verify succinct proofs rather than re-executing every block. Under the current Strawmap ordering, mandatory proofs are slated for K. A potential reordering is under review, which would swap the post-quantum attestation and mandatory proof milestones, moving PQ attestations forward to K and mandatory proofs back to L*. Regardless of the exact ordering, the push to deploy an L1 zkEVM will also drive advancements in formal verification tooling, workflows, and verified cryptographic components, which will benefit other research arcs, particularly the post-quantum initiative.

Prioritization and Execution: A Framework for Progress

The Protocol cluster’s guiding principle, first articulated in an all-Protocol update in July, remains consistent: "Concentrate Protocol on what only Protocol can do and will do, and complete the Strawmap items that allow Ethereum to uphold the Mandate." The successful completion of Glamsterdam and the establishment of the December 2029 post-quantum commitment have shifted this work from a long-term research concern to an immediate, near-fork delivery priority. This recalibration is reflected in a revised priority ladder, which places formal verification across the remaining research arcs as a cross-cutting tooling requirement.

The updated priority ladder categorizes objectives as follows:

P0 (Keep mainnet safe): This remains unchanged, reflecting the paramount importance of network stability and security.
P1 (Ship Glamsterdam and HegotÃ¡ without security or stability issues and in a timely manner): Post-Glamsterdam, this priority shifts to "Ship the critical components of HegotÃ¡, I, and J: the path to MV-PQ." This highlights the immediate focus on establishing the foundational elements for quantum resistance.
*P2 (Hold research and engineering capacity for the fork after next (I)):* This evolves to "Hold research and engineering capacity for K and L*, focused on accelerating the remaining PQ items," indicating a forward-looking allocation of resources for the final stages of the post-quantum roadmap.
P3 (Hold research capability for the five multi-year arcs): Post-Glamsterdam, this becomes "Hold research capability for the four remaining arcs (fast finality, privacy, state, and zkEVM), with formal verification as cross-cutting tooling that advances all of them." This emphasizes the integration of formal verification as a universal tool across development efforts.

The inclusion of work into future forks is governed by a maturity pipeline, moving from Research through EIPs, Prototypes, Devnets, Protocol-first Implementations (PFI), Client-first Implementations (CFI), and Security-first Implementations (SFI), culminating in Mainnet deployment. Each stage is designed to introduce verifiable evidence, reduce uncertainty, and establish clear ownership before the next commitment is made. The pipeline acknowledges that a devnet can trigger a return to the research phase, and that PFI, CFI, and SFI are indicators of confidence but do not replace concrete implementation evidence. The Protocol cluster’s unique mandate lies in guiding ideas through this entire pipeline.

HegotÃ¡: The Crucial First Test

The HegotÃ¡ upgrade is framed not as the final post-quantum fork, but as the critical juncture that determines whether subsequent quantum-related forks will occur on schedule. The SFI’d headliners for HegotÃ¡ are EIP-7805, "Fork-choice enforced Inclusion Lists (FOCIL)" for the consensus layer, and EIP-8141, "Frame Transaction" for the execution layer. The safe and simultaneous shipping of these two EIPs, along with rigorous testing of their interaction, forms the core engineering undertaking for this fork.

There is a notably limited appetite for additional scope on the consensus layer beyond FOCIL. Any proposed additions must demonstrably support post-quantum readiness. Each extra consensus-layer item would divert scarce research and client developer resources away from specifying and prototyping decoupled consensus, and from preparing for the I and J upgrades once HegotÃ¡ implementations are complete.

Upholding the Mandate: CROPS and HegotÃ¡ Commitments

The Ethereum Foundation’s Mandate defines the Protocol cluster’s core responsibilities through the framework of CROPS: Censorship Resistance (CR), Open Source and Free (O), Privacy (P), and Security (S). These principles are foundational to every fork, with open-source development and participation serving as a baseline. HegotÃ¡ specifically addresses commitments across Censorship Resistance, Privacy, and Security.

Censorship Resistance (CR): FOCIL aims to enhance Ethereum’s transaction inclusion guarantees by empowering multiple validators to impose constraints on block builders. Through Inclusion Lists (ILs), validators can specify transactions that must be included for a block to be considered valid by attesters. EIP-8369, "VOPS Profiles for FOCIL Eligibility," defines eligible transactions and validator verification requirements, ensuring FOCIL’s guarantees extend to future transaction types. Combined, these EIPs represent HegotÃ¡’s direct contribution to censorship and capture resistance.
Privacy (P): Ethereum currently lacks essential protocol support for privacy applications. EIP-8250, "Keyed Nonces," will enable multiple users to share a single sender address for improved anonymity while maintaining individual nonces, preventing transaction blocking. EIP-8272, "Recent Roots," will allow private transactions to leverage recent on-chain state, verifiable by FOCIL, thereby benefiting from its inclusion guarantees. Together, these EIPs address significant barriers to trustless, censorship-resistant private activity on L1 and are intended to ship alongside Frames.
Security (S): Frame transactions will introduce programmability to transaction validation, execution, and gas payment at the protocol level. This will provide accounts with a native pathway away from vulnerable secp256k1 keys, support signature aggregation, and allow for the introduction of new signature schemes without hard forks. It also ensures account validation and fee payment remain permissionless. Keyed nonces and recent roots will complete the core Frames functionality required for HegotÃ¡.

EIP-8365, "BLS Withdrawal Credential Retirement," will initiate the retirement process for withdrawal credentials tied to vulnerable cryptography, a step that can commence immediately without awaiting the full post-quantum consensus design. The Frames-extension package aims to harden accounts directly. EIP-7906, "Transaction Assertions via State Diff Opcode," will enable transactions to verify specified effects before commitment, mitigating attacks. EIP-8298, "SETCODEFROM Code Reuse Instruction," will allow delegated accounts to function as full smart-contract accounts. EIP-8151, "Account Code Restricted ecRecover," will block legacy key authentication once an account possesses actual code. These latter two EIPs are crucial for the account abstraction pathway towards retiring secp256k1 as a master key.

The security implications of worst-case block construction are also being addressed. EIP-8279, "Block Access List Byte Floor," and EIP-8131, "Unified Transaction Content Floor," will establish a predictable gas floor for adversarial block content. Any subsequent utilization of resulting headroom will be subject to separate scope decisions. The successful and safe delivery of FOCIL and Frames, alongside rigorous testing of their interaction, is the central engineering commitment for HegotÃ¡. Any proposed additions will be evaluated against this core testing surface and must meet a high bar of necessity.

Anticipating the Future

The companion post to this announcement provides the Protocol cluster’s detailed HegotÃ¡ tier list and a comprehensive explanation for each grading. This document is recommended as essential reading for a complete understanding of the proposed upgrade.

To foster further discussion and address community questions, the Protocol cluster will host a Reddit AMA (Ask Me Anything) on r/ethereum on September 16 at 2:00 PM UTC. Participants are encouraged to submit questions in advance via a dedicated form to ensure a productive and insightful session. The depth and specificity of submitted questions will significantly contribute to the quality of the discussion.