as far as i know, issue is you can derive the private key from public key. current bitcoin solution to this is, hashing the public key. because quantum computers are not that great at reversing hashes. many bitcoin address types are actually hashed public keys. so you only reveal your public key while spending your coins. and bitcoin best practice is using the same address once per utxo or per deposit. and when you spend this utxo many modern wallets will also use a new bitcoin address as change address as well. so you only reveal your public key while spending the utxo, and once you reveal the public key that address already becomes empty. so the only issue here is the lightning, because when you create a lightning channel, you also reveal your public key. but this time the revealed public key has access to the funds on the channel. im not sure if this is possible with bitcoin's scripting but one solution to this might be (without a new quantum address type), rotating the ownership of your side of the channel to a new address, every time you interact with it.

Replies (1)

Yes, I had forgotten about Lightning. This is another consideration, it might need to adopt key rotation ahead of other protocols.