Committing to quantum resistance: a slow defence for Bitcoin against a fast quantum computing attack.

摘要: Quantum computers are expected to have a dramatic impact on numerous fields due their anticipated ability solve classes of mathematical problems much more efficiently than classical counterparts. This particularly applies domains involving integer factorization and discrete logarithms, such as public key cryptography. In this paper, we consider the threats quantum-capable adversary could impose Bitcoin, which currently uses Elliptic Curve Digital Signature Algorithm (ECDSA) sign transactions. We then propose simple but slow commit–delay–reveal protocol, allows users securely move funds from old (non-quantum-resistant) outputs those adhering quantum-resistant digital signature scheme. The transition protocol functions even if ECDSA has already been compromised. While our scheme requires modifications Bitcoin these can be implemented soft fork.