-
Notifications
You must be signed in to change notification settings - Fork 5.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add EIP: Backward-Compatible Post-Quantum Migration #8454
Conversation
…rrors by GitHub markdown parser
File
|
|
||
## Disclosure | ||
|
||
The proposed design outlined in this EIP incorporates certain features that may be subject to claims in pQCee's patent-pending application (PCT [WO2023080842](https://patentscope.wipo.int/search/en/detail.jsf?docId=WO2023080842)). While it is important to ensure that adoption of the proposed post-quantum signature scheme remains accessible to all Ethereum stakeholders, this has to be balanced against the need to recognize and acknowledge the intellectual property rights associated with its development. We recognize the value of fostering an open and collaborative ecosystem that promotes widespread adoption and innovation within the Ethereum community, and as such, we welcome constructive dialogue with interested parties to explore appropriate licensing arrangements of the patented technologies to achieve these objectives. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
EIPs are meant to be open for anyone to implement. I do very much appreciate this disclosure, but I don't believe we can accept a proposal unless it also includes an irrevocable patent grant.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you for the feedback. This current design is preliminary. We will further engage the community to get more feedback regarding this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
marking this unresolved for @SamWilsn to take a call on this
The commit 6262259 (as a parent of 59296a5) contains errors. |
Hi @SamWilsn , I would like to check if there's further actions required on my part to facilitate the advancement of the pull request? |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
If the design outlined in this EIP is covered by a patent, we will need some kind of patent grant allowing implementations of this standard. Until such a grant has been provided, I cannot merge this pull request.
assets/eip-7693/hd_wallet.png
Outdated
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have a slight preference for SVGs, if you can provide them. If not, PNG is fine.
|
||
Quantum computers, when powerful enough, can be used to break cryptography used in Ethereum. Specifically, using Shor's algorithm on a cryptographically-relevant quantum computer (CRQC), an attacker will be able to create an exact copy of the private ECDSA key when given the public ECDSA key without needing access to the wallet. This will essentially allow the attacker to steal assets associated with any wallet on Ethereum. | ||
|
||
In order to ensure Ethereum continues to operate as a trusted decentralized platform for users and organizations to transact, the threat of quantum computers needs to be mitigated. Vitalik Buterin also wrote a post on 9 March 2024 titled "How to hard-fork to save most users’ funds in a quantum emergency" on the mitigation of the quantum threat on Ethereum ecosystem. Estimates on when a CRQC will be available range from 2028 to 2040. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Please remove the "link" to Vitalik's blog.
There has been no activity on this pull request for 2 weeks. It will be closed after 3 months of inactivity. If you would like to move this PR forward, please respond to any outstanding feedback or add a comment indicating that you have addressed all required feedback and are ready for a review. |
@SamWilsn Thank you for the feedback. We are still committed to make the Ethereum ecosystem quantum safe. As to the issue of Intellectual Property, we are still exploring options. |
Agree with suggested change. Co-authored-by: Sam Wilson <57262657+SamWilsn@users.noreply.github.com>
As decided in ethcatherders/EIPIP#362, we are unable to merge this pull request. If you are able to grant a patent license, you may open a new pull request and keep the same proposal number. |
Proposal to enhance the digital signing system for Ethereum to include a quantum-safe proof-of-knowledge (QSPoK) to ensure that the security of the transactions cannot be compromised by a quantum computer. Backward-compatibility is achieved by only introducing minimal changes to the existing implementations of Ethereum validators and clients.
QSPoK implementations include Zero-Knowledge Scalable Transparent Argument of Knowledge (zkSTARK) or MPC-in-the-Head (MPCitH).