- a16z supports lattice cryptography, arguing that hash-only designs may limit compatibility with hardware wallets and institutional security systems.
- StarkWare CEO Eli Ben-Sasson urges a three-to-five-year review of lattice cryptography before trusting it with significant funds.
- Vitalik Buterin proposes EIP-8288 to verify cryptographic computations through STARK proofs and recursive aggregation without extra precompiles.
Ethereum’s cryptography roadmap has drawn competing views from a16z, StarkWare CEO Eli Ben-Sasson, Gabriel Shapiro, and Vitalik Buterin. The debate centers on hash-based versus lattice-based cryptography and how Ethereum should support different signature systems. Buterin proposed using EIP-8288 to verify cryptographic computations without placing their underlying data directly onchain.
a16z Defends Lattice Cryptography as Ben-Sasson Objects
a16z argued that hash-only designs rely on custom cryptographic constructions outside NIST standards, including Ethereum’s planned consensus and account signatures. It also said the underlying hash remains undecided, potentially limiting compatibility with individual hardware wallets and institutional security systems.
The firm argued that relying exclusively on hash-based cryptography could produce more fragile systems. Instead, a16z said adopting lattice cryptography would improve blockchain security and functionality.
However, Eli Ben-Sasson strongly disagreed. The StarkWare CEO argued that lattice cryptography has mathematical structures that artificial intelligence could potentially exploit. He also questioned the maturity of succinct constructions based on module SIS, which he said have existed only since 2012.
Ben-Sasson recommended waiting another three to five years to evaluate the technology against potential AI attacks before entrusting it with significant funds.
Shapiro Defends Ethereum’s Current Cryptography Approach
Gabriel Shapiro said the debate initially made him question Ethereum’s roadmap, particularly alongside what he described as Justin Drake’s recent criticism. However, after researching the issue, Shapiro said Ethereum’s approach remained the best option for its needs.
He argued that alternative layer-1 projects, including LayerZero, could emphasize lattice-based cryptography to gain a narrative advantage. Shapiro also described the choice between lattice and hash-based methods as a debatable strategic decision.
He added that Ethereum could later support lattice-based cryptography for accounts and wallets through a precompile, provided researchers establish its security against AI attacks.
Vitalik Proposes EIP-8288 for Cryptographic Verification
Buterin said EIP-8288 could support different cryptographic systems without requiring additional precompiles. Under his proposal, users would generate signatures locally, prove them using STARKs, and submit proofs through recursive aggregation.
He argued that this approach would keep underlying data and computation offchain while allowing Ethereum to verify results. Buterin also warned that blockchain data capacity remains limited, estimating a practical ceiling of approximately eight megabytes per second, even with PeerDAS and blocks-in-blobs.
