Crypto Under Threat: Quantum Computing Looms Large, Industry Needs a Strategy
A newly released report, commissioned by Coinbase, cautions the crypto industry about the looming threat of quantum computing, emphasizing that while it may not pose an immediate danger, preparation is essential to mitigate potential risks. The report, authored by a panel of renowned cryptographers and academics, including Dan Boneh, Justin Drake, and Sreeram Kannan, highlights the potential vulnerability of widely used encryption to future fault-tolerant quantum computers. Recent estimates by Google researchers suggest that a sufficiently advanced quantum computer could potentially break Bitcoin's cryptography. In response, major crypto ecosystems such as the Ethereum Foundation have proposed new digital signatures designed to be safe against quantum computers, while others like Solana are experimenting with quantum-resistant wallet designs. Although current quantum machines lack the power to crack the cryptography underpinning Bitcoin, Ethereum, and other networks, the report stresses that complacency is not an option. The authors express high confidence that a large-scale, fault-tolerant quantum computer will eventually be built, with the timeline being uncertain but clearly on the horizon. This uncertainty poses a significant challenge, with estimates ranging from a few years to a decade or more, and no reliable way to predict breakthroughs. The report cites guidance from the U.S. National Institute of Standards and Technology, which recommends migrating to quantum-resistant cryptography by 2035, a timeline that may prove optimistic. The urgency is palpable, with the report emphasizing that waiting for the threat to become urgent is not a viable strategy, as transitions across blockchains, wallets, and exchanges could take years to execute safely. Certain assets may be more vulnerable than others, such as Bitcoin wallets that have already revealed their public keys. Fortunately, quantum-resistant cryptography already exists and is being standardized by NIST. However, the transition will not be seamless, as post-quantum digital signatures can be significantly larger than current ones, potentially increasing blockchain data costs and reducing throughput. The report outlines multiple transition strategies, including hybrid systems that combine existing cryptography with post-quantum updates or allow a gradual switch when needed. Ultimately, the authors recommend flexible approaches that avoid sacrificing current security or performance while enabling a rapid upgrade later, emphasizing that the time to begin preparing for the quantum threat is now.