PSA: Taproot loss of quantum protections



Summary:

A debate on the existence of a slow quantum computer arose in an original thread several years ago. However, the broader point was about the address reuse issue and the fact that there are limited solutions using the existing hash-indirection. On March 15th, Karl-Johan Alm explained that any QC issues in Bitcoin need to be solved in another way, as relying on the existing hash indirection would not be practical. The important difference between using hashes and naked pubkeys is that with hashes, an attacker has to race against the spending transaction confirming, whereas with naked pubkeys, the attacker doesn't have to wait for spend to occur, which drastically increases the available time to attack. In a scenario where it may initially take months to break a single key, anyone with a hashed pubkey would be safe, assuming no address reuse. Super Secure Exchange X with an ultra-cold 38-of-38 multisig setup using Taproot would have a timer ticking since the attacker needs to find only a single privkey like with any old P2PK output.


Updated on: 2023-05-21T01:58:58.876459+00:00