"There's nothing worse than trying to protect against quantum computing and then making Bitcoin insecure against regular computing." @Adam Back on why hash-based signatures are the conservative post-quantum choice for Bitcoin. Based on a 1979 paper. Decades of analysis. SHRINCS is where Blockstream Research landed.