Quantus warns that the cryptocurrency industry is unprepared for quantum computing threats, highlighting vulnerabilities in various systems.
The cryptocurrency sector is ill-prepared for the potential threats posed by quantum computing, according to a recent report by Quantus. The study, titled The State of Quantum: What Crypto Can’t Afford to Ignore, highlights vulnerabilities across wallets, exchanges, custodians, validators, bridges, and governance systems.
Currently, many market participants still use traditional signature schemes such as ECDSA and Ed25519. As quantum computers advance, Shor's algorithm could theoretically compromise these systems.
In August 2024, the National Institute of Standards and Technology (NIST) is set to finalize post-quantum cryptography standards, namely ML-KEM and ML-DSA, as a proactive measure against the limitations of classical cryptographic methods.
Challenges for Blockchain Technology
Experts from Quantus emphasize that the complexities of blockchain technologies impose stricter challenges compared to traditional IT infrastructures. Unlike centralized services, where cryptographic protocols can be updated through patches, blockchain systems require more careful consideration due to decentralized governance and user-controlled fund storage.
The report introduces the concept of "harvest now, decrypt later," where data is collected now for future decryption by powerful quantum machines.
Christopher Smith, CEO and CTO of Quantus, warned that the crypto market may not receive a clear warning before the advent of quantum threats. He stated, "The crypto market needs to build infrastructure in advance, not under pressure." No specific timeline exists for when quantum computers will be capable of breaking existing encryption schemes, but developments in quantum computing are increasingly moving into practical applications.
Bitcoin at Risk
The report also examines Bitcoin, noting that standard transactions using ECDSA require approximately 97 bytes for signatures and public keys. Transitioning to ML-DSA-87 signatures could increase this size to around 7187 bytes, which would dramatically decrease transaction capacity per block if network architecture remains unchanged.
Furthermore, the report discusses BIP-360, a proposal aimed at enhancing Bitcoin's quantum protection through a Pay-to-Merkle-Root format, while acknowledging that it doesn't resolve all compatibility and scalability issues.
Quantus's Proposed Solutions
Quantus argues that post-quantum cryptography introduces a new iteration of the "blockchain trilemma," where larger signatures can hinder scalability, and privacy enhancements can drive up costs. To address these challenges, they suggest using zero-knowledge mechanisms to reduce the load on the main blockchain. Innovations mentioned include Wormhole Addresses and various proof aggregation techniques.
Tech Industry's Preparations
In contrast to the crypto sector, major tech companies are already making strides towards post-quantum security. For instance, Signal has developed the PQXDH protocol, while Google and Apple are integrating hybrid and PQ3 systems into their services, respectively. This indicates that consumer tech is gearing up for the post-quantum era more swiftly than many in the cryptocurrency market.
Additionally, Lightning Labs' CTO, Olaoluwa Osuntokun, recently showcased a prototype aimed at safeguarding Bitcoin wallets against potential quantum threats.
