Bitcoin has 3–5 years to prepare for quantum risk, says Bernstein

Advances successful quantum computing could yet airs a menace to Bitcoin’s cryptographic security, but the hazard remains manageable and improbable to origin existential disruption, according to a caller probe study by Bernstein.

In the report, the Bernstein squad — Gautam Chhugani, Mahika Sapra, Sanskar Chindalia and Harsh Misra — described quantum computing arsenic a “manageable upgrade cycle” alternatively than an “existential risk.”

Recent breakthroughs, including research from Google showing a important simplification successful the resources required to interruption modern encryption, person accelerated the timeline for imaginable threats. However, gathering quantum computers almighty capable to compromise Bitcoin (BTC) remains years distant owed to large method hurdles and precocious costs.

Bernstein estimates the crypto manufacture has astir 3 to 5 years to hole for post-quantum information upgrades, allowing clip to modulation toward quantum-resistant cryptographic standards.

The modulation would apt beryllium handled by Bitcoin’s open-source developer assemblage and halfway contributors, who are liable for proposing and implementing protocol upgrades done consensus.

Quantum experts mostly springiness a 10-year timeline for cryptographically applicable quantum computers (CRQCs), oregon machines susceptible of breaking today’s encryption. Source: Bernstein

Related: Researchers accidental quantum computers could, successful theory, beryllium acceptable by 2030

Quantifying the quantum hazard for Bitcoin

Quantum computing differs from classical computing successful that it uses “qubits,” which tin encode aggregate states simultaneously. This enables algorithms that, successful principle, could interruption wide utilized encryption methods, including those utilized to unafraid Bitcoin wallets.

Still, the hazard is not azygous crossed the network.

According to Bernstein, vulnerabilities are chiefly concentrated successful older Bitcoin wallets and addresses that reuse nationalist keys, which are much exposed to imaginable attacks. Newer wallet formats and champion practices, specified arsenic avoiding code reuse, importantly trim this risk.

Bitcoin’s mining process, which relies connected SHA-256 hashing, is not considered meaningfully susceptible to quantum attacks oregon AI quantum computing breakthroughs.

Bernstein believes definite Bitcoin code types — specifically pay-to-public-key (P2PK), pay-to-multisig (P2MS) and pay-to-Taproot (P2TR) — are among the astir susceptible to quantum risks.

Bernstein identifies P2PK, P2MS and P2TR code types arsenic the astir susceptible to quantum risks. Source: Bernstein

The hazard is peculiarly pronounced for older “legacy” wallets. Roughly 1.7 cardinal Bitcoin, including an estimated 1.1 cardinal BTC attributed to Satoshi Nakamoto, are held successful aboriginal P2PK addresses, wherever nationalist keys are permanently exposed.

Related: Is $450B successful Bitcoin susceptible to the quantum threat? Analysts measurement in