Giancarlo Lelli breaks a 15-bit ECC key using quantum computing, winning 1 BTC, and signaling potential vulnerabilities in crypto security.
Giancarlo Lelli, an independent researcher, has successfully cracked a 15-bit elliptic curve cryptography (ECC) key using a publicly available quantum computer, earning a reward of 1 BTC from Project Eleven for this achievement.
His work utilized an adapted version of Shor's algorithm, allowing him to explore 32,767 potential combinations. This method focuses on the discrete logarithm problem, which underpins digital signatures integral to many blockchain systems.
This breakthrough marks a significant leap from previous efforts; in September, engineer Steve Tippakonnick had extracted a six-bit ECC key using a 133-qubit IBM quantum computer. Lelli's feat eclipses Tippakonnick's result by a factor of 512, making it the largest quantum attack on ECC to date.
Despite the impressive nature of this demonstration, it's worth noting that Bitcoin relies on 256-bit ECC for security, indicating that practical attacks on current systems remain a challenge. Project Eleven acknowledged this and highlighted that the movement to post-quantum cryptography is more of an engineering hurdle rather than an insurmountable scientific issue.
Implications for the Crypto Community
Project Eleven's CEO, Alex Pruden, remarked on the diminishing resource requirements for such quantum attacks, suggesting that the potential for future attacks is increasing. He called attention to the fact that approximately 6.9 million BTC reside in wallets with public keys accessible on-chain, raising concerns about their security as quantum capabilities advance.
The topic of quantum threats has gained traction within the crypto community, especially following Google's revised estimates on the quantum power needed to compromise Bitcoin. Some experts, including Bitcoin developer Jameson Lopp, have proposed ideas like BIP-361 to safeguard vulnerable coins, though such suggestions have faced criticism for their authoritarian implications.
Other blockchain networks, such as Ethereum and Ripple, are also considering upgrades toward post-quantum security measures in anticipation of these evolving threats.
