Subject: Re: [bitcoindev] Trivial QC signatures with clean upgrade path

From: "David A. Harding" <[email-masked]>
Date: Tue, 31 Dec 2024 22:38:00 -1000

On 2024-12-16 12:20, Tadge Dryja wrote:
> An on-chain proof of quantum computer (PoQC I guess :) ) would be a
> way to reduce the damage of activation forks.  One way to build it:
> Create a NUMS point pubkey - something like described in BIP341.  Send
> some coins to that address, then watch if it gets spent. [...]
> Nodes can then have code which
> watches for such a proof and changes consensus rules based on it.

I think this could be even more useful if combined with a previous idea 
far creating a NUMS[1][3] (or trust minimized[2]) pubkey compatible with 
Bitcoin but with a security strength less than 128 bits.  That way 
someone might claim the bounty of the key with (say) 96 bits security 
potentially months or years before QC advances made regular keys 
insecure and tempted operators of QCs into stealing from regular user 
addresses.

-Dave

[1] 
https://gnusha.org/pi/bitcoindev/[email-masked]/
[2] 
https://gnusha.org/pi/bitcoindev/aRiFFJKz5wyHFDi2dXcGbNEHZD2nIwDRk7gaXIte-N1BoOEOQ-ySYRnk0P70S5igANSr2iqF2ZKV1dWvipaQHK4fJSv9A61-uH7w4pzxKRE=@protonmail.com/
[3] 
https://gnusha.org/pi/bitcoindev/[email-masked]/

-- 
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email-masked].
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/56e0005eb75e4f1720a5aabbcdb0535c%40dtrt.org.