Tech/EIPs/#8052
EIP 8052카테고리 · 코어유형 · 표준 트랙상태 · 초안

Precompile for Falcon support

EIP-8052는 또 다른 NIST 표준 양자 내성 서명 알고리즘인 Falcon을 위한 이더리움 프리컴파일 추가를 제안하는 코어 Draft입니다. Falcon은 격자 기반 서명으로, ML-DSA보다 서명 크기가 작은 특성을 갖습니다.

Falcon Algorithm Overview

Falcon is a NIST-standardized post-quantum signature scheme based on NTRU lattices. It offers smaller signature sizes compared to ML-DSA (CRYSTALS-Dilithium), making it attractive for bandwidth-sensitive applications. EIP-8052 proposes a precompile to allow efficient on-chain Falcon signature verification.

Precompile Design

Similar to EIP-8051, the Falcon precompile accepts a public key, message, and signature and returns a verification result. Gas costs are calibrated to reflect the computational work required for Falcon verification, which differs from ML-DSA due to the different underlying math. The precompile is designed to support both Falcon-512 and Falcon-1024 parameter sets.

Complementary to EIP-8051

EIP-8052 and EIP-8051 are companion proposals that together provide two distinct post-quantum signature options for the EVM. Applications can choose between ML-DSA and Falcon based on their signature size, verification speed, and security tradeoff preferences. Having both available maximizes post-quantum flexibility for smart contract developers.

Draft Considerations

Key open questions include gas cost calibration across different Falcon parameter sets, handling of malformed inputs, and edge cases in the Falcon decoding process. The proposal references NIST test vectors for compliance verification. Community review from cryptographers and EVM implementers is needed before advancement.

공식 EIP 문서open_in_new