Anchorage Digital unveils a strategy to boost security against quantum computing threats, including various innovations for asset protection.
Anchorage Digital, a regulated cryptocurrency bank, has announced a comprehensive strategy to safeguard institutional assets from potential quantum computing threats. This initiative includes the adoption of hybrid security measures for its internal TLS connections.
The main vulnerability for cryptocurrencies lies not in mining but in the reliance on digital signatures. Shor's algorithm poses a theoretical risk, as it could allow the derivation of a private key from a public key.
“Quantum computing is not a moment, but a migration. At Anchorage Digital, we have been building the infrastructure for this migration from day one,” said Nathan McCauley, co-founder and CEO.
Anchorage has enhanced the security of client bitcoin holdings by utilizing addresses based on public key hashes. This method conceals the key until a transaction is initiated and emphasizes minimizing address reuse.
For TLS connections, the institution is employing post-quantum key encapsulation on devices running ChromeOS, which provides resistance against future quantum threats.
Additionally, the strategy incorporates hardware security modules for the secure storage and processing of cryptographic keys. Anchorage is actively integrating post-quantum cryptography into its operational framework and assessing various algorithms' performance.
To assist in migrating legacy accounts to post-quantum security, Anchorage has introduced a mechanism called Post-Quantum Turnstile. This utilizes STARK technology, a zero-knowledge proof method that enables verification without revealing secrets or requiring a trusted setup.
This innovation addresses concerns regarding the transition away from classical signatures, ensuring the accessibility of funds while protecting them from quantum vulnerabilities. Anchorage estimates that this method could potentially be applied to about two-thirds of circulating bitcoin.
Furthermore, Anchorage has released the source code of sqisign-rs, its implementation of the SQIsign digital signature scheme in Rust, boasting signatures that are roughly seven times smaller than those produced by Falcon.
Analysts from Glassnode have previously estimated that approximately 6 million BTC could be endangered by quantum attacks due to exposed public keys. Additionally, a recent assessment highlighted the broader cryptocurrency sector's lack of preparedness for a shift towards post-quantum cryptography.
