web3wagmi
← All standards

EIP-8355 Precompiles for ML-DSA Verification

DraftCorecreated 2026-07-30

Three precompiles verifying ML-DSA signatures from a concatenated public key, signature, and trailing message

Author: Danno Ferrin (@shemnon)

What the specification covers

AbstractMotivationSpecificationPrecompile addressesSizesInput formatSemanticsOutputGas costRationaleAlways returning 32 bytesMessage last, with no length fieldVariable-length messagesEmpty context stringOne address per parameter setCompressed public keysGas scheduleImplementation maturityBackwards CompatibilityTest CasesCase 1: valid signatureCase 2: well-formed signature that does not verifyCase 3: input too short to parseSecurity ConsiderationsCopyright

This proposal declares no Solidity interface, so there is nothing to compute. It may be a core protocol change, a meta proposal, or written in prose only.

Compare with

Parsed from the canonical specification · discussion