I've been rolling my eyes at the quantum computer threat to Bitcoin for years now, but based on this recent podcast from @preston it sounds like timeframe is uncertain, but the threat is legitimate.
I'd be interested to hear more discussion on this as it's much more fundamental to current use cases than the current node discussion.
Login to reply
Replies (21)
🤖 Tracking strings detected and removed!
🔗 Clean URL(s):
❌ Removed parts:
?si=0qpJ_InreQd-Np_8
It is wise to ponder such fundamental shifts in cryptographic capability, a truly important consideration. Bitcoin's architecture and its vigilant community are well-positioned to evolve and implement necessary security upgrades as technology advances, anticipating future needs.
I'm beginning to study quantum cryptography because of this. It's interesting.
Here's a different way to think about it.
Quantum will likely be able to break classical encryption within a defined period of time.
If you have an encrypted message, it can see the encrypted text and attempt to break it using a probability curve with a language model to identify outcome.
But when it comes to Bitcoin, or any keypair, the private key cannot be derived from the public key, so you need a different target to focus on.
Bitcoin’s defence isn’t just cryptography. It’s probabilistic obscurity.
What are you going after?
Wallet addresses with valid (high balances)?
Random, valid addresses?
The problem is not how easily will they break encryption, it's how will they target which encrypted wallets to break?
Key rotation is going to become more important as we move towards the quantum singularity.
Quantum is useless without target selection.
Target selection requires information.
Bitcoin hides information by default until the precise moment of movement.
After that, key hygiene determines who gets hurt.
Legit threat but not a near term meteor. QC breaks exposed ECDSA keys, so reused addresses and old coins matter most. Feels more like a migration issue than extinction.
You can't decrypt with statistics.
Reversing a hashing algorithm needs conditional bit flops.
Or if you can somehow do it with statistics, it needs the conditional setting of registers, which means conditional bit flops.
Obviously, The hash algorithm ( NSA made ? ) could have a backdoor a quantum gizmo helps with 🤷♂️
*trap door algorithm
If this is true then an attacker would need my xpub to decrypt?
This is bullish in a way because it will force people not to use addresses twice or leak their xpub. Xpubs will become much more closely guarded data.
Ooh yes, your xpub becomes much more significant 😱
Honestly it doesn't feel like quantum computing is ever going to be an actual factor in the real world, just like nuclear fusion, anti-matter, asteroid mining, or flying cars. All those things have been "near-future technologies" for decades, meanwhile the number of nuclear fission plants is decreasing, well-established technologies like trains and planes are stagnating and everything is slowly coming to a halt like some Randian nightmare.
I dont know enough about it to discuss, but found this video interesting. Talks about btc around 6 minutes in
I know someone who is working on fusion and they're actually making more progress than I would have anticipated. Not sure about the others..
as far as i know, issue is you can derive the private key from public key.
current bitcoin solution to this is, hashing the public key. because quantum computers are not that great at reversing hashes.
many bitcoin address types are actually hashed public keys. so you only reveal your public key while spending your coins.
and bitcoin best practice is using the same address once per utxo or per deposit. and when you spend this utxo many modern wallets will also use a new bitcoin address as change address as well.
so you only reveal your public key while spending the utxo, and once you reveal the public key that address already becomes empty.
so the only issue here is the lightning, because when you create a lightning channel, you also reveal your public key.
but this time the revealed public key has access to the funds on the channel.
im not sure if this is possible with bitcoin's scripting but one solution to this might be (without a new quantum address type), rotating the ownership of your side of the channel to a new address, every time you interact with it.
Yes, I had forgotten about Lightning.
This is another consideration, it might need to adopt key rotation ahead of other protocols.
Don’t let fiat waste any more of your time.
I don't, but I like cryptography.
Yes. This should be the main discussion, not price or spam.
Also, providing an upgrade path to qantam resistance would help price.
View quoted note →
But still exposed to short-range attackers (after exposing transaction to mempool, but before transaction is put in a block)?
Better pay those fees then 😅
Quantum computers are going to be a gold mine for Bitcoin miners, pun intended 😂