Bitcoin’s Quantum Migration Challenge

While no quantum computer capable of breaking Bitcoin’s elliptic-curve signatures exists today, research into long-term protection is accelerating. A primary focus is SHRINCS, a draft proposal utilizing hash-based signatures. Unlike current 64-byte Schnorr signatures, SHRINCS signatures range from 548 to 5,777 bytes. This increase in size could strain block space and transaction throughput, forcing developers to balance cryptographic strength with network efficiency.

The Risks of Stateful Signatures

The SHRINCS proposal introduces a stateful signing mechanism that requires wallets to track usage counters to prevent key reuse. If a wallet loses its state—perhaps through a backup restoration or hardware rollback—and attempts to reuse a signing slot, the resulting exposure could allow an attacker to forge signatures and steal funds. While a stateless fallback exists, it relies on significantly larger signatures, creating a trade-off between performance and security.

Beyond the cryptography, the transition faces massive social and technical hurdles. Current wallet features, such as non-hardened BIP32 derivation and threshold signing, do not translate cleanly to hash-based systems. Furthermore, hardware wallets may struggle with the increased memory and processing requirements of post-quantum operations. With proposals like BIP 360 and BIP 361 still in draft status, the community has yet to reach consensus on how to handle legacy coins or force a migration, leaving the network's long-term quantum resistance a work in progress.