The recent surge in interest in quantum computing, fueled by Google's claims that a powerful enough machine could compromise legacy blockchains with relative ease, has sparked a nuanced discussion among experts. For XRP holders, the consensus is that the token's architecture provides better protection against quantum threats than Bitcoin's. This is largely due to the XRP Ledger's open-source, decentralized nature and its use by fintech firm Ripple for cross-border transactions. Let's delve into the details step by step.
The primary concern with quantum computing is its potential to reverse-engineer private keys from exposed public keys, thereby allowing attackers to drain funds from vulnerable accounts. Typically, a public key is exposed when a transaction is sent, and the wallet address, derived from the public key, is shared to receive funds.
However, XRP's exposure to this risk is mitigated by several factors. A recent audit of the XRP Ledger found that approximately 300,000 accounts holding 2.4 billion XRP have never sent funds, only receiving them, which means their public keys have never been exposed to the network. These accounts are, by default, quantum-safe. Additionally, there are dormant 'whale' accounts that have transacted in the past, exposing their public keys, but these transactions occurred at least five years ago.
The XRP Ledger features a 'key rotation' mechanism that allows users to change their signing key without moving funds, effectively changing the 'lock' on their account without having to move the account itself. This feature is technically available to all users but poses a problem for long-dormant accounts that may have lost keys or are no longer active. Mayukha Vadari, a staff software engineer at Ripple, highlighted the 'escrow feature' as another defense mechanism.
Funds locked in escrow with a time lock are protected not by cryptography, but by logic, as the time lock prevents withdrawal until a specified time has passed. It's worth noting that while the time lock safeguards the funds, the account that locked them can still carry quantum risks. In comparison, the quantum threat to Bitcoin appears more severe. A significant portion of early Bitcoin was mined using a format that directly exposed public keys in transaction outputs.
This includes Satoshi Nakamoto's 1 million BTC, which has never been moved. Google estimates that about 6.9 million BTC are vulnerable, accounting for nearly 35% of Bitcoin's circulating supply. These funds are essentially 'sitting ducks' for potential quantum attackers. Bitcoin holders who recognize the threat face a structural problem: the lack of a key rotation feature, leaving them with no option but to move funds to a new address.
However, during the transfer, the public key of the old address is exposed, making it vulnerable to exploitation by a sufficiently powerful quantum machine. Although this risk is still theoretical, it underscores the relative structural vulnerability of Bitcoin holders.
It's worth noting that Bitcoin developers have initiated proposals to develop quantum resistance.