EIP Radar
@ 1a086d5 ·
EIP-8051

Precompile for ML-DSA signature verification

Precompiled contracts for FIPS-204 ML-DSA signature verification and an EVM-optimized variant

DraftSplurge

Status history

  1. Draft15 Oct 2025

Abstract

This proposal adds precompiled contracts that perform signature verifications using the NIST module-lattice signature scheme. Two instantiations are supported: * ML-DSA — NIST-compliant version using SHAKE256 (FIPS-204), * ML-DSA-ETH — EVM-optimized version for cheaper on-chain verification: * Uses Keccak-based PRNG instead of SHAKE256 (leverages native KECCAK256 precompile) * Stores public-key…

Created
15 Oct 2025
Authors
Renaud Dubois, Simon Masson
Upgrades
Not listed in any upgrade
Requires
EIP-7932
Required by
—