The notion that quantum computing poses an imminent threat to bitcoin's security has been a recurring theme in recent headlines. However, a more nuanced examination of the situation, as presented in recent academic papers, indicates that the actual risk is more complex and constrained by physical limitations.
Two key threats to bitcoin's security are often cited: the potential for a sufficiently powerful quantum computer to derive a private key from a public key, thereby compromising wallet security, and the possibility of a quantum computer outpacing traditional mining hardware, potentially allowing for a 51% attack on the network. The first threat is based on Shor's algorithm, while the second is related to Grover's algorithm.
Despite the theoretical potential of these algorithms, practical considerations significantly mitigate their impact. For instance, running Grover's algorithm against the SHA-256 function used in bitcoin mining would necessitate quantum hardware on a scale that is currently unimaginable, with estimates suggesting that the energy required would approach that of a small star.
Moreover, the production of new blocks every ten minutes means that any attempt to use quantum computing for a 51% attack would require an enormous number of machines operating in parallel, each with thousands of qubits and dedicated support systems to prevent errors. This scenario is not only prohibitively expensive but also physically unachievable with current technology.
Another aspect of the quantum threat narrative involves the breaking of encryption through quantum factoring. Recent research, however, has demonstrated that many of the purported breakthroughs in this area are based on flawed methodologies, such as the use of specially chosen numbers that are easy to factor, or the reliance on classical preprocessing to simplify the problem before applying quantum techniques. These practices allow researchers to claim quantum factoring achievements without actually advancing the field.
A notable example involves replicating major quantum factoring breakthroughs using a 1981 home computer and basic techniques, highlighting the lack of real progress in this area. The genuine concern regarding quantum computing and bitcoin security lies in the potential vulnerability of older or reused wallets, where key information may already be exposed on the blockchain.
If quantum machines were to improve significantly, these wallets could become targets. Recent estimates suggest that the computing power needed for such an attack could decrease substantially, potentially making it feasible in the future. However, building a machine capable of this is currently beyond the realm of physical possibility and would require significant engineering advancements. In response to these threats, developers are working on implementing fixes, including reducing key exposure and developing new signature types designed to be resistant to quantum attacks.
The markets reflect a view that while the quantum threat is real, it is not immediate, with traders assigning higher odds to upgrades aimed at reducing wallet risk rather than a complete overhaul of the mining algorithm in the near term.