Bitcoin and Quantum Computing: Current Perspectives
The ongoing deliberation regarding Bitcoin’s adaptation to potential quantum computing threats has shifted focus towards enhancing wallet security and managing dormant coins. Charles Guillemet, the Chief Technology Officer at Ledger, emphasized that transitioning to a new signature methodology for Bitcoin might be less daunting than ensuring the security of existing user funds and facilitating the overall migration process.
“Currently, Bitcoin is not facing a quantum computing crisis,”
underscoring the importance of careful migration planning due to the complexities involved in software adaptations, hardware updates, and user transition, which could span numerous years.
SHRINCS Proposal and Migration Journey
Highlighting the absence of any known quantum computer capable of compromising Bitcoin’s current signature systems, Guillemet’s analysis outlined the draft proposal SHRINCS as a Bitcoin-specific post-quantum signature framework. This approach merges a compact stateful signing mechanism with an extensive stateless recovery path, although the specification lacks a formal BIP designation and still requires a security verification.
Guillemet outlined the migration journey into three key components:
- The selection of a suitable post-quantum signature system,
- The modification of Bitcoin wallets and protocol infrastructure accordingly,
- The management of existing cryptocurrencies that could involve coins whose owners may have misplaced their keys or are otherwise inactive.
Current Signature Vulnerabilities
Bitcoin’s transaction validation relies on ECDSA and Schnorr signatures, which are susceptible to disruption from advanced quantum computers utilizing Shor’s algorithm. However, existing quantum machines have yet to demonstrate the capability to exploit these vulnerabilities effectively.
He cautioned against evaluating the migration process based solely on the cryptographic robustness of a new system, as the successful implementation across wallets, hardware devices, and associated backups must also be considered. Notably, Guillemet pointed out that forming a consensus around legacy coins, especially those at risk of being lost or abandoned, represents a particularly challenging aspect of the transition.
Community Support and Security Considerations
Guillemet received support from fellow cryptographers, including Stanford’s Dan Boneh, who advocated for a cautious approach to quantum risk—stressing the necessity to avoid hasty migrations that could inadvertently lead to software flaws.
The current iteration of the SHRINCS specification employs SHA-256 as a foundation, aiming for a security level of approximately 128 bits against classical attacks and 64 bits against quantum threat scenarios. The design introduces two distinct signing pathways via a 48-byte public key; the compact pathway utilizes Flexible XMSS and WOTS+C, producing stateful signatures ranging from 548 to 4,619 bytes, while a stateless alternative generates a 5,777-byte signature based on SLH-DSA concepts.
In contrast to earlier versions, which suggested a 324-byte stateful signature, the revised September draft starts at 548 bytes, reflecting the development process’s evolution. Blockstream Research has backed the premise that hash-based signatures offer solid cryptographic assurances while allowing for efficient transaction verification.
Future Directions and Recommendations
Despite showcasing SHRINCS verification in the Liquid sidechain through the Simplicity framework, its application on the Bitcoin mainnet remains a subject of research and review prior to any consensus implementation. The deployment of a new signature system fundamentally alters existing wallet architecture, as current systems rely on non-hardened BIP32 key derivations which lack direct adaptability to hash-based signatures—presenting a challenge for both threshold signing mechanisms and hardware performance considerations.
As the Bitcoin community contemplates its quantum-resistant future, an independent review by Project Eleven concluded that SHRINCS places critical security dependencies on wallets and custodial environments, where backup restorations could inadvertently lead to the misuse of keys. The draft’s security features, however, allow for an alternative stateless signing path to be employed if its state management encounters issues, thereby safeguarding access to funds even under operational constraints.
In addition to the SHRINCS proposal, discussions are underway concerning other drafts, including BIP 360, aimed at addressing potential vulnerabilities in Taproot, and BIP 361, which proposes a structured phase-out of legacy signature types after establishing a post-quantum system. The success of these proposals hinges on resolving critical questions surrounding how to handle BTC that remain unconverted, particularly when considering coins perceived as lost or inaccessible due to owner inactivity.
As it stands, Coinbase’s cryptographic advisory team urges the Bitcoin community to initiate migration planning preemptively in the interests of long-term security. The current drafts of BIP 360 and BIP 361 remain under review as of mid-September, with SHRINCS still not assigned a formal designation or integrated into Bitcoin’s consensus model. Guillemet ultimately frames the pressing challenge as preparing for future migration efforts before viable quantum-capable hardware emerges, hinting at the urgency for progress in this realm while acknowledging the speculative nature of current proposals.
