Post-quantum cryptography and Bitcoin: how serious is the threat timeline?

[Blake_32]

This comes up periodically and the conversation tends to either dismiss it as too far away to matter or treat it as an imminent existential problem. The reality is somewhere more interesting and more nuanced.

Quantum computers capable of breaking Bitcoin's elliptic curve cryptography would require fault-tolerant machines with millions of reliable logical qubits. Current systems have hundreds of physical qubits with significant error rates. The research announcements this week, including IQM's barbell codes and various error correction developments, are meaningful but the gap between current hardware and Bitcoin-threatening capability remains very large.

NIST has finalised post-quantum cryptographic standards. Bitcoin's upgrade mechanism (soft fork process) has been used for significant protocol changes before. The question is whether the threat timeline is such that the community needs to move proactively now or can track developments and respond.

This is a genuine technical and governance question worth having seriously rather than in the usual binary of it is fine versus we are all going to lose our coins.

[Q]

The cryptographically relevant quantum computer timeline has been consistently pushed back as the difficulty of fault-tolerant operation became clearer. Ten years ago people said five years. Now people say ten to fifteen years. Maintaining scepticism about timelines seems reasonable.

[Glenn83]

The IQM barbell codes and similar error correction announcements this week are meaningful progress but they are still orders of magnitude from what would threaten Bitcoin's cryptography. Progress is real, the gap is still enormous.

[PhilippeMercadal]

The governance challenge is more concerning to me than the technical challenge. Bitcoin's soft fork process is slow and requires significant consensus. Agreeing on a post-quantum signature scheme and coordinating the upgrade would require a level of coordination the community has historically found difficult.

[Megan95]

NIST's standardised post-quantum algorithms exist now. The technical path forward for Bitcoin's cryptography is known. The question is when to move and how to handle transition for the enormous stock of funds in old address formats.

[Bob81]

AI being used to accelerate quantum computing development is the part of this story that makes timelines harder to model. If machine learning can optimise error correction approaches significantly faster than human researchers the progress curve changes.

[Midnight Wolf]

The addresses with exposed public keys, specifically coins that have been spent from and therefore have public keys on chain, are the more immediate concern. A quantum attacker would target those first. There is a genuine amount of Bitcoin in vulnerable address types.

[DarkSideRichard47]

There is a specific vulnerability window between when quantum computers are capable of breaking the cryptography and when the Bitcoin network completes a post-quantum upgrade. Minimising that window requires starting the upgrade discussion earlier than strictly necessary.

[Jude_54]

My honest view: the threat is real on a long enough timeline and the community should be actively working on the upgrade path now rather than when it becomes urgent. The urgency of a crisis is a bad environment for careful cryptographic protocol design.