#Quantum and #Bitcoin enthusiast❤️Quantum Awareness ❤️ No quantum security, no future ❤️ No investment advice here❤️AI Creator ❤️Love peace and freedom❤️
🚨#Bitcoin will go to zero as the U.S. government phases out the elliptic curve algorithms it uses. If Bitcoin doesn't transition to #quantum-resistant, it will inevitably cause irreversible losses to investors. 😭
#Whistleblower
NIST IR 8547 LINK👇
https://t.co/HHZWqyC9xv
59"40'
Ask: yr point of view abt post-quantum signature schemes for Bitcoin if you have a favorite?
Prof. Dan Boneh:..the question is what to do about abt the transition, yeah? the answer is there's really no good answer. It's kind of sad actually
https://t.co/8dmZgCtVQS
DJB has transitioned his focus toward post-quantum cryptography (PQC)!!!
The main takeaway from this paper is that the transition to post-quantum cryptography must be handled with great care. Even minor implementation mistakes can easily lead to full key compromise. The migration to PQC should optimize for overall system risk, not focus solely on quantum-threat resistance. In the near term, this may justify a hybrid approach combining classical and post-quantum cryptography to better mitigate operational and deployment risks, even if it comes with additional complexity!
@isabelfoxenduke@neha@hashbreaker 4/n
The list of all 2000+ guys who contributed to NIST-PQC is completely public, guess what? NO a single overlapping name with Bitcoin Devs.
TBH, in the whole crypto space, I barely know of 5 ppl on the list. The only top-tier expert is Chris Peikert of @Algorand rooted fr @MIT
"Given everything I know, including scary non-public information, I now put the odds of qday by 2032 at 50%. 10% by 2030."
@drakefjustin's numbers echo the conclusion from our recent report: "Q-Day is more likely to occur than not by 2033, and potentially even as soon as 2030."
Migration to quantum-resistant cryptography is no longer optional but imperative for any blockchain system expected to be trusted and secure value into the future.
@drakefjustin Dear Bitcoin security researcher, time is ticking! Bitcoin may already be running out of time to complete its migration to quantum resistance! @drakefjustin
Just a non-expert question for top cryptography experts: is SLH-DSA suitable for use in Bitcoin? And is the aggregation threshold both feasible and easy to implement?🙏😅 @johbuchmann@hashbreaker@hyperelliptic@cr_yp_to
@drakefjustin Dear Bitcoin security researcher, time is ticking! Bitcoin may already be running out of time to complete its migration to quantum resistance! @drakefjustin
This is a list I compiled several years ago outlining the obstacles to Bitcoin’s migration to quantum-resistant, for your reference. I may add a few more critical—perhaps even fatal—barriers in the future. 😅
The obstacles to migration are as follows.
1. No suitable quantum-resistant algorithm
2. Hash-based and lattice-based algorithms have excessively large public keys and signatures
3. Migrating to quantum-resistant algorithms could cause severe on-chain congestion and even paralysis
4. Quantum-resistant algorithms result in a significant reduction in transaction efficiency
5. Increased node and transaction fees
6. Who has the authority to freeze or burn Satoshi’s addresses and other lost addresses
7. The aggregation threshold in quantum-resistant algorithms is challenging
8. Taproot makes the transition to quantum-resistant even more difficult
9. High hardware upgrade costs
10. 1MB block size is not suitable for quantum-resistant algorithms
11.Achieving global consensus is extremely difficult
and more...
One of the coolest things I've seen in a while (h/t @eigenlabs), and the clearest demonstration yet that AI is pulling Q-Day forward: a crowdsourced, open-research competition to optimize the Google ECDLP circuit, the best known approach for breaking ECDSA with a quantum computer.
In March, Google Quantum AI published a paper on the quantum threat to Bitcoin and other digital assets. Notably, they referenced, but did not reveal, the circuit used in their resource estimate. Instead, they used a zero-knowledge proof to show they had compiled it without revealing its layout.
Two months later, that circuit is no longer state of the art. On ecdsa dot fail, anyone can take a baseline circuit and try to beat the Google benchmark. The current leading submission doesn't just meet it; it exceeds it (as of this writing) by 13.3% on the core metric (logical qubits times Toffoli gates).
And these aren't results from a national lab or a leading technology company. Experts and amateurs are working side by side, including AI-driven "autoresearch" from people who aren't cryptographers. Even teenagers are participating.
Circuit design is only one piece. The same open, AI-assisted method can be aimed at error correction, decoding algorithms, and every other layer of the stack. Optimized in parallel, by anyone, continuously.
This is what the timeline debates keep missing. Q-Day doesn't depend on one breakthrough, at one company, on one roadmap. It's being chipped away at an accelerating rate by a distributed, disconnected group of people, both inside the industry and outside it.
It's a great demonstration of the power of AI to accelerate scientific progress, but also a reminder of the accelerationist reality we live in.
From a cybersecurity perspective, it means Q-Day timelines are only going to move up, not back, from here.
🚨Time is ticking away. I have a serious warning for those who keep claiming that quantum is just FUD and still far away: your delay and denial are slowly destroying Bitcoin.
For bitcoin, all these 3 are the most important:
PoW, multi-signatures, threshold signatures!
Now the question for you bitcoiners:
Which quantum-safe dig-sig is the best for all those 3 above?
Sphincs+?