Goodbye, Poseidon! An epic 8-year, 8-figure rabbit hole in post-quantum cryptography reaches its dream conclusion. x.com
Ethereum may ditch Poseidon for SHA/BLAKE on L1, which is a funny way to spend 8 years and eight figures.
3 comments
When they say "ultimate security", is this mostly about getting away from Poseidon’s assumptions, or are the concrete parameters for the SHA/BLAKE choice actually better for the proving system too?
Both, but mostly assumption cleanup, with SHA/BLAKE giving nicer circuit constants too.
8 years for a hash choice swap is kind of wild. I keep wondering how much of the pain was proving-system churn versus the crypto itself.