AI disclosure: drafted by Basis Desk's AI newsroom and machine-checked against the primary sources listed below — how we use AI. Originally published on Basis Desk.
As quantum computers scale, major cryptocurrency networks face different timelines and severity levels for potential cryptographic breaks. Public key signatures face eventual obsolescence, while hashing remains largely secure.
Key points
- Shor's algorithm threatens public key signature schemes like ECDSA and Ed25519 used by most blockchains.
- Grover's algorithm poses a lesser threat to hashing functions like SHA-256, which remain largely quantum-resistant.
- Addresses are most vulnerable when their public keys have been exposed to the network via previous outgoing transactions.
- Migrating to post-quantum cryptography requires network forks and larger signature data sizes.
Quantum computing introduces a distinct structural threat to modern cryptographic systems. For cryptocurrency networks, this threat is unevenly distributed based on the specific cryptographic primitives employed. Public key signature schemes, which authorize transactions, face eventual obsolescence against sufficiently powerful quantum machines. Conversely, cryptographic hash functions, which secure block progression and address generation, possess robust innate resistance to quantum attacks. The timeline for this threat remains years away, allowing network developers substantial lead time to implement post-quantum cryptography.
The Threat to Digital Signatures: Shor's Algorithm
Blockchains like Bitcoin and Ethereum rely on the Elliptic Curve Digital Signature Algorithm (ECDSA) to prove ownership of assets. When a user initiates a transaction, they sign it with a private key. The network verifies this signature against the user's public key without exposing the private key. This mathematical asymmetry forms the foundation of non-custodial asset ownership.
Shor's algorithm, a quantum algorithm designed for integer factorization and discrete logarithms, theoretically breaks this asymmetry. A quantum computer running Shor's algorithm can derive a private key directly from a public key. If a malicious actor possesses a user's public key, they can run Shor's algorithm to compute the private key and authorize transactions to drain the associated funds. This vulnerability applies broadly across crypto assets using ECDSA or Ed25519 signatures, encompassing the vast majority of current blockchain infrastructure. According to the National Institute of Standards and Technology (NIST), all current public-key cryptography standards will eventually be vulnerable to a cryptographically relevant quantum computer.
Quantum Resistance in Hashing: Grover's Algorithm
While signatures are vulnerable, the hashing algorithms that link blockchain blocks and generate addresses are highly resistant. Bitcoin uses SHA-256 for its proof-of-work mining and block headers. The primary quantum threat to hashing is Grover's algorithm, which speeds up brute-force searches of unstructured data by searching databases quadratically faster than classical counterparts.
However, Grover's algorithm only provides a quadratic speedup. A brute-force attack on a 256-bit hash using a classical computer requires $2^{256}$ operations. A quantum computer using Grover's algorithm requires $2^{128}$ operations. Because $2^{128}$ operations remains an astronomically large number, SHA-256 is considered quantum-resistant. Mining hardware may evolve to incorporate quantum processing units in the future, but the core hashing algorithm does not require immediate replacement to maintain network security. Network developers generally agree that upgrading to a 512-bit hash function would easily mitigate any future advances in Grover's algorithm efficiency.
The Problem of Exposed Public Keys
The quantum vulnerability of a specific cryptocurrency address depends entirely on whether its public key is exposed to the network. In systems like Bitcoin, a standard address is a hash of the public key. The public key is only revealed to the network when the user broadcasts a transaction to spend from that address.
If a user receives $BTC to a new address and never spends from it, the public key remains hidden behind the quantum-resistant SHA-256 hash. A quantum attacker cannot run Shor's algorithm without the public key. However, if a user spends a portion of the funds and reuses the same address for the change, or reuses the address to receive future payments, the public key is permanently exposed on the public ledger. An exposed public key allows a quantum computer running Shor's algorithm to calculate the private key. Analysts estimate that millions of historical Bitcoin addresses have exposed public keys due to early wallet software reusing addresses, or users manually receiving multiple deposits to the same destination. Network contributors have begun outlining strategies to address this. Bitcoin Developers Propose BIP 360 to Mitigate Long-Exposure Quantum Vulnerabilities.
Ethereum architecture differs slightly in its practical exposure. While Ethereum addresses are also hashes of public keys, the account-based model means that once an externally owned account (EOA) initiates any transaction—such as approving a smart contract or sending a token—the public key for that account is permanently visible on the ledger. Any subsequent assets held in that account are theoretically vulnerable to a future quantum attack if the network does not migrate to new cryptographic standards.
Quantifying the Hardware Gap
To understand the gap between current quantum capabilities and the requirements to break cryptocurrency signatures, it is necessary to examine qubit requirements. A logical qubit is a stable, error-free computational unit.
Breaking a 256-bit ECDSA key using Shor's algorithm requires approximately 2,330 logical qubits. However, because quantum states are highly fragile and prone to decoherence, systems require quantum error correction. This process uses multiple physical qubits to create one stable logical qubit.
Assuming a standard surface code error correction overhead, creating one logical qubit might require 1,000 physical qubits. Therefore, a quantum computer would need roughly 2.3 million physical qubits to break a single Bitcoin signature. Current quantum processors feature roughly 1,000 physical qubits. The engineering challenge to scale from 1,000 to millions of physical qubits, while maintaining coherence and operating at near absolute zero temperatures, dictates the multi-decade timeline for this threat.
Post-Quantum Migration Roadmaps
Upgrading a decentralized network to post-quantum cryptography (PQC) requires extensive coordination. NIST has finalized the first set of PQC algorithms, providing a baseline for network developers. These include lattice-based cryptographic schemes like ML-DSA (Module-Lattice-Based Digital Signature Algorithm), which rely on mathematical problems that are difficult for both classical and quantum computers to solve.
Migrating a cryptocurrency involves introducing new signature schemes through a hard fork or soft fork. Users would then need to transfer their assets from legacy addresses to new, quantum-secure addresses. The transition presents logistical challenges. Lattice-based signatures are significantly larger in data size than ECDSA signatures, which increases blockchain bloat and transaction fees. For instance, replacing a 64-byte ECDSA signature with a PQC equivalent could inflate the signature size to several kilobytes, drastically reducing network throughput.
Network developers are currently researching methods to compress these signatures and optimize the transition phase using advanced zero-knowledge cryptography. Ethereum Foundation Details Lean Roadmap to Deploy Post-Quantum Cryptography by 2029. The migration process will require node operators to update client software and users to actively move funds, raising questions about how networks will handle long-dormant addresses containing early-mined coins whose owners have lost private keys and cannot migrate.
Common Misconceptions
- Quantum computers will instantly steal all crypto. Network developers actively monitor quantum progress and will deploy PQC upgrades long before machines reach the necessary scale to break ECDSA in a timeframe shorter than block confirmation times.
- Current quantum computers are breaking keys today. Today's quantum computers are noisy intermediate-scale quantum (NISQ) devices. Breaking ECDSA requires millions of stable, error-corrected physical qubits, whereas current machines lack the fidelity and scale to execute Shor's algorithm against 256-bit curves.
- Quantum threats invalidate blockchain technology. The threat targets specific cryptographic primitives, not the distributed ledger model itself. Upgrading the signature schemes resolves the vulnerability without altering consensus mechanisms.
What to Watch
Market participants should monitor the finalization of NIST PQC standards and their subsequent adoption by major software libraries and hardware security modules (HSMs). The implementation of PQC upgrades in protocol testnets will serve as the primary indicator of network readiness. Market focus may shift toward how specific protocols handle the "dormant coin" problem—specifically, whether networks will eventually agree to quarantine or burn funds in long-unspent addresses with exposed public keys that fail to migrate to quantum-secure formats prior to the advent of a cryptographically relevant quantum computer.
FAQ
Can quantum computers currently hack Bitcoin?
No. Current quantum computers lack the millions of error-corrected physical qubits required to break 256-bit elliptic curve cryptography.
Why is hashing considered safer than digital signatures against quantum attacks?
Quantum algorithms provide an exponential speedup against digital signatures (Shor's algorithm) but only a quadratic speedup against hashing (Grover's algorithm). Current hash sizes like SHA-256 remain robust.
What makes a public key 'exposed'?
In many blockchain architectures, the public key is hidden behind a hash (the address). It is only broadcast and recorded on the public ledger when an outgoing transaction is signed and executed.
How will cryptocurrency networks fix the quantum threat?
Networks will deploy protocol upgrades via forks to integrate post-quantum cryptographic standards, requiring users to migrate assets to newly secured address formats.
Sources
- Ethereum Accounts — Ethereum.org
- Post-Quantum Cryptography — National Institute of Standards and Technology (NIST)
Basis Desk is a source-verified crypto newsroom. Market data, a free MCP server for AI agents and JSON APIs: basisdesk.news/developers. Not investment advice.
Top comments (0)