The Quantum Threat to Bitcoin: How a Powerful Computer Can Crack Encryption in Under 10 Minutes

In the first part of this series, we explored the principles of quantum computing. However, understanding how a quantum computer works is only half the story; the other half involves knowing what it can attack. This piece will examine bitcoin's encryption, how it works, and where its vulnerabilities lie, particularly in the face of a quantum algorithm. Bitcoin relies on elliptic curve cryptography, a system that uses a pair of keys: a private key, which is a secret number, and a public key, derived from the private key through a mathematical operation on a specific curve. The relationship between the two keys is essentially a one-way function, making it easy to generate a public key from a private key but virtually impossible for classical computers to do the reverse. This one-way function is the foundation of bitcoin's security model, allowing users to prove ownership of their coins without revealing their private keys. However, the advent of quantum computing, particularly with the discovery of Shor's algorithm, threatens to undermine this security. Shor's algorithm can efficiently solve the discrete logarithm problem, which is the basis of bitcoin's encryption, by exploiting quantum properties such as superposition, entanglement, and interference. This algorithm can break the one-way function, potentially allowing an attacker to derive a private key from a public key. The implications are significant, especially considering Google's recent paper, which suggests that the number of qubits required to run Shor's algorithm against bitcoin's encryption might be lower than previously estimated. The paper introduces a practical attack scenario where parts of the algorithm can be precomputed, waiting for a target public key to appear. Once a public key is exposed, the quantum computer only needs to finish the second half of the calculation, which Google estimates could take about nine minutes. This timeline is alarming because it coincides with bitcoin's average block confirmation time, giving an attacker a window of opportunity to derive a private key and submit a competing transaction. While the immediate threat is still theoretical, requiring a quantum computer that does not yet exist, the long-term implications are profound, particularly for the 6.9 million bitcoin already exposed on the blockchain. These coins are vulnerable to an 'at-rest' attack, where an attacker can take as long as needed to derive the private key. The race to develop quantum-resistant cryptography and the future of bitcoin's security in the face of quantum computing advancements will be crucial in the coming years.