EIP-8450: Post-Quantum Validator Key Registry

Discussion topic for EIP-8450

This EIP adds a post-quantum public key registry to the beacon state. Each validator registers one leanXMSS key, bound to its existing validator index. The key is a two-layer hash-based tree with 2**32 leaf indices, and all hashing uses Keccak-256.

Registration is a new beacon block operation carrying the public key and a proof of possession under it. It is authorized either by the validator’s BLS signing key (register only) or by its withdrawal address through a new EIP-7685 request (register or replace).

The keys stay dormant: no duty uses them in this fork. A later fork switches duties to them. Until then, the registry shows the fraction of stake with registered keys, and gives every registered validator a key that was registered while BLS was still secure.

Feedback is especially welcome from CL teams and staking pool operators.

Update Log

External Reviews

None as of 2026-10-22.

Outstanding Issues

None as of 2026-10-22.