{
  "id": 8052,
  "title": "EIP-8052: Precompile for Falcon support",
  "status": "Draft",
  "type": "Standards Track",
  "category": "Core",
  "summary": "Adds three precompiles for lattice-based signature verification that are safe against Quantum Computer analysis. The scheme splits verification into Hash-to-Point (with NIST SHAKE256 or EVM-friendly Keccak variants) and a core algorithm, enabling both NIST compliance and gas-efficient verification.",
  "impacts": [
    "Access to Post-Quantum security with the most compact signatures compared to other lattice schemes",
    "Provides modular access to post-quantum cryptography with choice between standardized (SHAKE256) and gas-efficient (Keccak-PRNG) variants for Hash-to-Point",
    "Compact PQ signatures (666 bytes) for contract wallets, though larger than ECDSA. Will need to standardize HD key generation and derivation paths.",
    "Will need to add language and CLI access to Falcon signature verification and generation across three precompiles",
    "Will need to add to next L2 hard fork. Modular design may enable ZK-friendly implementations in the future.",
    "Invisible to stakers, leanConsensus is where PQC will be introduced to them",
    "Invisible to the consensus layer, leanConsensus is where PQC will be introduced to them",
    "Will integrate external library (PQClean, reference implementation, etc) for three precompiles: two Hash-to-Point variants and one core algorithm. Extensive assets are provided to facilitate integration. Task involves library integration, NTT optimization, and gas metering.",
    "NIST-standardized lattice-based post-quantum cryptography",
    "Compact signatures (~666 bytes) compared to other PQ schemes",
    "Modular design separating Hash-to-Point from core verification",
    "EVM-optimized variant using Keccak-PRNG reduces gas costs significantly",
    "Enables future ZK-SNARK/STARK optimizations via alternative Hash-to-Point implementations",
    "Hardness based on SIS problem over NTRU lattices, secure against quantum adversaries"
  ],
  "discussion_url": "https://ethereum-magicians.org/t/eip-8052-precompile-for-falcon-support/25860",
  "source_markdown_url": "https://github.com/ethereum/EIPs/blob/master/EIPS/eip-8052.md",
  "canonical_url": "/latest/eips/8052.json",
  "markdown_url": "/latest/eips/8052.md",
  "citations": [
    {
      "recordId": "eip-8052",
      "artifactPath": "normalized/8052.json",
      "url": "/records/proposal/eip-8052/normalized/8052.json",
      "label": "EIP-8052: Precompile for Falcon support",
      "snippet": "Adds three precompiles for lattice-based signature verification that are safe against Quantum Computer analysis. The scheme splits verification into Hash-to-Point (with NIST SHAKE256 or EVM-friendly Keccak variants) and "
    }
  ]
}