A planned quantum-safe signature for accounts, built only from hash functions.
Why it matters: The likely replacement for ECDSA in accounts.
On the map: stateless hash-based, replaces ECDSA through frame transactions
Map note, rests on: hash security only (no state)
A stateless hash-based signature scheme being optimized for Ethereum accounts, targeted at strawmap fork I* (around 2028)[1] through frame transactions. "Stateless" means a signer doesn't need to track which one-time keys were used, safer for wallets that restore from backups.
It rests only on hash security, the most conservative assumption on the map[2], at the cost of larger signatures. The EF runs an open research competition (sig.golf)[3] to find the smallest secure variant.
It may not be the only option. The EF's post-quantum team also plans signature-verification precompiles (around fork J*) and is evaluating lattice schemes, Falcon and Dilithium (ML-DSA), next to SPHINCS+[4]. With frame transactions each account picks its own scheme, so some accounts could end up resting on lattices instead of hashes alone.
If any of these breaks, this breaks too.
If this breaks, these break with it.
Nothing on the map depends on it: it is an end point of the roadmap.
Next-step links, not dependencies: these don't fall together.