A long-discussed solution for safeguarding Bitcoin wallets against potential quantum attacks has been developed by a prominent Bitcoin developer. The innovation provides a means to rescue ordinary wallets if the network is forced to implement a quantum-defense upgrade. In the face of a quantum adversary, a proposed emergency soft fork for Bitcoin involves disabling the Taproot keyspend path, which could effectively lock out millions of users from their funds.
The newly unveiled prototype, created by Olaoluwa 'Roasbeef' Osuntokun, chief technology officer at Lightning Labs, offers a potential solution to this issue. Bitcoin's current encryption method could be compromised by sufficiently powerful quantum computers, allowing attackers to seize funds by exploiting public data on the blockchain. A leading proposal, BIP-360, aims to provide users with a new, quantum-resistant type of wallet to migrate their funds into ahead of any potential threat. However, not all users may migrate in time, prompting discussions about a more drastic 'emergency brake' that would shut off Bitcoin's current signature system network-wide to prevent attacks.
This upgrade could inadvertently freeze out users who rely on the signature system, rendering their wallets inaccessible. Osuntokun's prototype provides an alternative method for users to prove ownership of their wallets without relying on digital signatures, which could be forged by a quantum computer. Instead, the system allows users to mathematically prove they were the original creators of the wallet using the secret 'seed' that every Bitcoin wallet is generated from, without revealing the seed itself. This proof can be generated and verified efficiently, with the prototype demonstrating a generation time of approximately 55 seconds and a verification time of under two seconds.
While the prototype is functional, there is currently no formal proposal to add it to the Bitcoin blockchain, and developers remain divided on the urgency of the quantum threat. Academic researchers note that many quantum 'breakthroughs' rely on simplified test conditions, and large-scale attacks on Bitcoin's mining system would face physical limits. Nevertheless, the risk to exposed wallets is considered significant enough that developers have been exploring defensive upgrades for years.
The prototype addresses a theoretical gap in Bitcoin's defense plan, providing a potential means to protect the network from quantum attacks without inadvertently locking users out of their wallets.