The concept of a quantum computer breaching bitcoin's security in a matter of minutes has sent shockwaves through the cryptocurrency community. Google's Quantum AI team revealed that a future quantum computer could potentially derive a bitcoin private key from its corresponding public key in roughly nine minutes. This revelation has significant implications for the security of bitcoin transactions. To understand the severity of this threat, it's essential to grasp how bitcoin transactions work.
When a user sends bitcoin, their wallet uses a private key to sign the transaction, which is then broadcast to the network and awaits confirmation by a miner. The private and public keys are linked through a complex mathematical problem known as the elliptic curve discrete logarithm problem.
While classical computers are incapable of reversing this math in a meaningful timeframe, a sufficiently powerful quantum computer running the Shor's algorithm could potentially do so. The 'nine minutes' claim refers to the time it would take for a quantum computer to derive a private key after a public key appears in the mempool, given that the machine has been 'primed' in advance by pre-computing parts of the attack. This gives the attacker a significant chance of redirecting funds before the original transaction is confirmed.
However, this type of attack, known as the mempool attack, requires a quantum computer that does not yet exist. A more pressing concern is the approximately 6.9 million bitcoin that are already vulnerable due to exposed public keys.
These coins are at risk of being cracked by a sufficiently powerful quantum computer without any time pressure. The bitcoin network's 2021 Taproot upgrade inadvertently increased the number of vulnerable wallets. While the bitcoin network itself would continue to function, the ability to derive private keys from public keys would undermine the ownership guarantees that make bitcoin valuable, potentially leading to a collapse of institutional trust in the network's security model.
The solution to this problem lies in post-quantum cryptography, which involves replacing the vulnerable math with algorithms that quantum computers cannot crack.