Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Royal Society Open Science

Committing to quantum resistance: a slow defence for Bitcoin against a fast quantum computing attack

I. Stewart, Dragos Ilie, Alexei Zamyatin, Sam M. Werner, Maziar Fayaz Torshizi, William J. Knottenbelt

Published Jun 1, 2018• 82 citations
Publisher

Abstract

Quantum computers are expected to have a dramatic impact on numerous fields due to their anticipated ability to solve classes of mathematical problems much more efficiently than their classical counterparts. This particularly applies to domains involving integer factorization and discrete logarithms, such as public key cryptography. In this paper, we consider the threats a quantum-capable adversary could impose on Bitcoin, which currently uses the Elliptic Curve Digital Signature Algorithm (ECDSA) to sign transactions. We then propose a simple but slow commit-delay-reveal protocol, which allows users to securely move their funds from old (non-quantum-resistant) outputs to those adhering to a quantum-resistant digital signature scheme. The transition protocol functions even if ECDSA has already been compromised. While our scheme requires modifications to the Bitcoin protocol, these can be implemented as a soft fork.

DOI
10.1098/rsos.180410

Related papers

QUANTUM-RESISTANT CRYPTOGRAPHIC ALGORITHMS FOR SECURE COMMUNICATION

Vijay S, S. Shanmuga Priya, C. N. Harshavardhana +1 more

With the rise of quantum computing, traditional cryptographic algorithms, such as the Elliptic Curve Digital Signature Algorithm (ECDSA), face potential vulnerabilities. Quantum computers could efficiently solve problems that are currently computationally infeasible for classical computers, thus threatening the security of cryptographic systems. As a result, there is a pressing need to develop quantum- resistant cryptographic algorithms to ensure secure communication in a future where quantum computing is prevalent. ECDSA, widely used for securing digital communications, relies on elliptic curve cryptography to provide robust security through digital signatures. However, the advent of quantum computing poses a significant threat to ECDSA's security, as quantum algorithms such as Shor's algorithm could break the elliptic curve-based encryption by efficiently solving discrete logarithm problems. To address this issue, we propose a quantum-resistant cryptographic algorithm based on lattice-based cryptography. Our approach utilizes the Learning With Errors (LWE) problem, known for its resistance to quantum attacks. We implement the proposed algorithm and compare its performance with ECDSA in terms of key generation time, signing time, and verification time. The algorithm's security is analyzed against quantum attacks using theoretical and empirical methods. The experimental results demonstrate that the quantum-resistant algorithm provides a comparable level of security to ECDSA while offering significant advantages in the context of quantum resistance. Specifically, our quantum-resistant algorithm achieved key generation times of 120 ms, signing times of 150 ms, and verification times of 100 ms. In comparison, ECDSA showed key generation times of 80 ms, signing times of 90 ms, and verification times of 70 ms. Despite these performance trade-offs, the quantum resistance of the proposed algorithm ensures future-proof security for digital communications.

ICTACT Journal on Communication Technology•Sep 1, 2024•2 citations

The Impact of Quantum Computing on Digital Signature

Nuzhat Atiqua Nafis

Quantum computing represents one of the most disruptive technological advancements of the 21st century, with profound implications for modern cryptographic systems. Traditional digital signature algorithms—such as RSA, DSA, and Elliptic Curve Cryptography (ECC)—derive their security from mathematical problems like integer factorization and discrete logarithms, which are computationally infeasible for classical computers. However, the advent of quantum algorithms, particularly Shor’s and Grover’s algorithms, poses a direct threat to these cryptographic assumptions by drastically reducing the time required to solve such problems. This development renders existing Digital Signature infrastructures potentially obsolete once large-scale quantum computers become operational. To counter this threat, researchers have proposed a range of post-quantum cryptographic (PQC) algorithms, including lattice-based, hash-based, and multivariate polynomial-based signature schemes, which are designed to resist quantum attacks. This paper critically examines the extent of quantum vulnerability in current Digital Signature systems and evaluates the comparative performance, efficiency, and security trade-offs of post-quantum alternatives. The study aims to provide a structured understanding of the ongoing transition toward quantum-resistant digital authentication and to propose a roadmap for secure implementation in future cryptographic environments.

•Jan 10, 2026•0 citations

Quantum Attacks on Bitcoin, and How to Protect Against Them

Divesh Aggarwal, Gavin K. Brennen, Troy Lee +2 more

The key cryptographic protocols used to secure the internet and financial transactions of today are all susceptible to attack by the development of a sufficiently large quantum computer. One particular area at risk is cryptocurrencies, a market currently worth over 100 billion USD. We investigate the risk posed to Bitcoin, and other cryptocurrencies, by attacks using quantum computers. We find that the proof-of-work used by Bitcoin is relatively resistant to substantial speedup by quantum computers in the next 10 years, mainly because specialized ASIC miners are extremely fast compared to the estimated clock speed of near-term quantum computers. On the other hand, the elliptic curve signature scheme used by Bitcoin is much more at risk, and could be completely broken by a quantum computer as early as 2027, by the most optimistic estimates. We analyze an alternative proof-of-work called Momentum, based on finding collisions in a hash function, that is even more resistant to speedup by a quantum computer. We also review the available post-quantum signature schemes to see which one would best meet the security and efficiency requirements of blockchain applications.

arXiv:1710.10377•Ledger•Oct 17, 2018•231 citations

The Quantum Barrier: Cryptographic Safeguards for Blockchain Integrity

Muhammad Talha Tahir Bajwa, Awais Rasool, Ayesha Khalid +1 more

The fast-growing development of quantum computing is a great threat to classical cryptographic protocols underpinning the security of blockchain networks. The use of quantum attacks on algorithms, like RSA and Elliptic Curve Cryptography (ECC) used to perform digital signatures and verify transactions, is susceptible to the quantum attack, especially the Shor algorithm. This is an emerging risk that casts doubt on long term reliability and trustworthiness of blockchain systems in their various applications in the fields of finance to the field of healthcare. To overcome this difficulty, new cryptographic primitives exist, developed by the field of post quantum cryptography (PQC), which resist quantum computational power, such as lattice based, hash based, multivariate and code based. This paper examines how quantum-resistant cryptographic algorithms can be implemented into blockchain architecture, and how their security, scalability, and performance impacts can be assessed. Moreover, there are hybrid schemes that adapt classical and quantum safe schemes are taken as the transitional schemes to make backward compatibility. This study identifies practical avenues towards realising quantum resilient blockchain systems that are capable of supporting security in the post quantum era by analysing and comparing their possible implementations.

International Journal of Advanced Computing & Emerging Technologies•Sep 17, 2025•0 citations

Quantum-Resistant Cryptography and Its Implications for Blockchain and Cryptocurrency: A Comprehensive Mathematical Analysis

Tehzeeb Ali Gows Basha

Modern public key cryptosystems rely on two assumptions regarding computational difficulty: the integer factorization problem (RSA) and the discrete logarithm problem (elliptic curve cryptography).These problems have stood the test of time for four decades of cryptanalysis.Yet, their algebraic and periodic nature makes them vulnerable to quantum algorithms, most notably Shor's algorithm (1994).This paper presents a detailed comparison between classical and quantum-resistant cryptographic systems with an emphasis on lattice-based systems.The Learning With Errors (LWE) problem and its variants (Ring-LWE, Module-LWE) do not have the same periodicity that makes problems like integer factorization and discrete logarithms susceptible to quantum algorithms.Furthermore, LWE problems have reductions from worst-case lattice problems and have mathematical proofs of quantum resistance.Due to the vulnerability of ECDSA algorithms for cryptocurrencies, it is estimated that current cryptocurrencies will no longer be secure once quantum computer technology matures within the next 10-30 years, potentially compromising holdings estimated at between $260 billion and $390 billion as of August 2026.The implications of cryptanalysis on public key cryptography systems motivate mathematical recommendations regarding the security of current cryptosystems and the need for a shift to post-quantum cryptographic standards.

Oxford Journal of Student Scholarship•Aug 30, 2026•0 citations

Quantum Resistant Cryptography and Cyberwarfare

William Easttom

Quantum computing poses a significant threat to conventional cryptographic systems that rely on the difficulty of mathematical problems such as integer factorization and discrete logarithms. These systems underpin much of the current security infrastructure, including public key cryptography and digital signatures. As quantum computers approach practical viability, there is an urgent need to transition to quantum-resistant cryptographic solutions that can secure digital communications against adversaries equipped with quantum capabilities. This paper explores the landscape of quantum-resistant cryptography, focusing on those algorithms that have emerged either as standards or as leading algorithm. Furthermore, the paper examines the progress of standardization efforts, such as the National Institute of Standards and Technology (NIST) Post-Quantum Cryptography (PQC) initiative, and the implications of deploying these algorithms in existing systems. By addressing the practical considerations for adoption, this study aims to provide a comprehensive overview of the current state and future directions of quantum-resistant cryptography, ensuring robust security in a post-quantum world.

International Conference on Cyber Warfare and Security•Mar 24, 2025•1 citation
Quantum computers are expected to have a dramatic impact on numerous fields due to their anticipated ability to solve classes of mathematical problems much more efficiently than their classical counterparts. This particularly applies to domains involving integer factorization and discrete logarithms, such as public key cryptography. In this paper, we consider the threats a quantum-capable adversary could impose on Bitcoin, which currently uses the Elliptic Curve Digital Signature Algorithm (ECDSA) to sign transactions. We then propose a simple but slow commit-delay-reveal protocol, which allows users to securely move their funds from old (non-quantum-resistant) outputs to those adhering to a quantum-resistant digital signature scheme. The transition protocol functions even if ECDSA has already been compromised. While our scheme requires modifications to the Bitcoin protocol, these can be implemented as a soft fork.
With the rise of quantum computing, traditional cryptographic algorithms, such as the Elliptic Curve Digital Signature Algorithm (ECDSA), face potential vulnerabilities. Quantum computers could efficiently solve problems that are currently computationally infeasible for classical computers, thus threatening the security of cryptographic systems. As a result, there is a pressing need to develop quantum- resistant cryptographic algorithms to ensure secure communication in a future where quantum computing is prevalent. ECDSA, widely used for securing digital communications, relies on elliptic curve cryptography to provide robust security through digital signatures. However, the advent of quantum computing poses a significant threat to ECDSA's security, as quantum algorithms such as Shor's algorithm could break the elliptic curve-based encryption by efficiently solving discrete logarithm problems. To address this issue, we propose a quantum-resistant cryptographic algorithm based on lattice-based cryptography. Our approach utilizes the Learning With Errors (LWE) problem, known for its resistance to quantum attacks. We implement the proposed algorithm and compare its performance with ECDSA in terms of key generation time, signing time, and verification time. The algorithm's security is analyzed against quantum attacks using theoretical and empirical methods. The experimental results demonstrate that the quantum-resistant algorithm provides a comparable level of security to ECDSA while offering significant advantages in the context of quantum resistance. Specifically, our quantum-resistant algorithm achieved key generation times of 120 ms, signing times of 150 ms, and verification times of 100 ms. In comparison, ECDSA showed key generation times of 80 ms, signing times of 90 ms, and verification times of 70 ms. Despite these performance trade-offs, the quantum resistance of the proposed algorithm ensures future-proof security for digital communications.
Quantum computing represents one of the most disruptive technological advancements of the 21st century, with profound implications for modern cryptographic systems. Traditional digital signature algorithms—such as RSA, DSA, and Elliptic Curve Cryptography (ECC)—derive their security from mathematical problems like integer factorization and discrete logarithms, which are computationally infeasible for classical computers. However, the advent of quantum algorithms, particularly Shor’s and Grover’s algorithms, poses a direct threat to these cryptographic assumptions by drastically reducing the time required to solve such problems. This development renders existing Digital Signature infrastructures potentially obsolete once large-scale quantum computers become operational. To counter this threat, researchers have proposed a range of post-quantum cryptographic (PQC) algorithms, including lattice-based, hash-based, and multivariate polynomial-based signature schemes, which are designed to resist quantum attacks. This paper critically examines the extent of quantum vulnerability in current Digital Signature systems and evaluates the comparative performance, efficiency, and security trade-offs of post-quantum alternatives. The study aims to provide a structured understanding of the ongoing transition toward quantum-resistant digital authentication and to propose a roadmap for secure implementation in future cryptographic environments.
The key cryptographic protocols used to secure the internet and financial transactions of today are all susceptible to attack by the development of a sufficiently large quantum computer. One particular area at risk is cryptocurrencies, a market currently worth over 100 billion USD. We investigate the risk posed to Bitcoin, and other cryptocurrencies, by attacks using quantum computers. We find that the proof-of-work used by Bitcoin is relatively resistant to substantial speedup by quantum computers in the next 10 years, mainly because specialized ASIC miners are extremely fast compared to the estimated clock speed of near-term quantum computers. On the other hand, the elliptic curve signature scheme used by Bitcoin is much more at risk, and could be completely broken by a quantum computer as early as 2027, by the most optimistic estimates. We analyze an alternative proof-of-work called Momentum, based on finding collisions in a hash function, that is even more resistant to speedup by a quantum computer. We also review the available post-quantum signature schemes to see which one would best meet the security and efficiency requirements of blockchain applications.
The fast-growing development of quantum computing is a great threat to classical cryptographic protocols underpinning the security of blockchain networks. The use of quantum attacks on algorithms, like RSA and Elliptic Curve Cryptography (ECC) used to perform digital signatures and verify transactions, is susceptible to the quantum attack, especially the Shor algorithm. This is an emerging risk that casts doubt on long term reliability and trustworthiness of blockchain systems in their various applications in the fields of finance to the field of healthcare. To overcome this difficulty, new cryptographic primitives exist, developed by the field of post quantum cryptography (PQC), which resist quantum computational power, such as lattice based, hash based, multivariate and code based. This paper examines how quantum-resistant cryptographic algorithms can be implemented into blockchain architecture, and how their security, scalability, and performance impacts can be assessed. Moreover, there are hybrid schemes that adapt classical and quantum safe schemes are taken as the transitional schemes to make backward compatibility. This study identifies practical avenues towards realising quantum resilient blockchain systems that are capable of supporting security in the post quantum era by analysing and comparing their possible implementations.
Modern public key cryptosystems rely on two assumptions regarding computational difficulty: the integer factorization problem (RSA) and the discrete logarithm problem (elliptic curve cryptography).These problems have stood the test of time for four decades of cryptanalysis.Yet, their algebraic and periodic nature makes them vulnerable to quantum algorithms, most notably Shor's algorithm (1994).This paper presents a detailed comparison between classical and quantum-resistant cryptographic systems with an emphasis on lattice-based systems.The Learning With Errors (LWE) problem and its variants (Ring-LWE, Module-LWE) do not have the same periodicity that makes problems like integer factorization and discrete logarithms susceptible to quantum algorithms.Furthermore, LWE problems have reductions from worst-case lattice problems and have mathematical proofs of quantum resistance.Due to the vulnerability of ECDSA algorithms for cryptocurrencies, it is estimated that current cryptocurrencies will no longer be secure once quantum computer technology matures within the next 10-30 years, potentially compromising holdings estimated at between $260 billion and $390 billion as of August 2026.The implications of cryptanalysis on public key cryptography systems motivate mathematical recommendations regarding the security of current cryptosystems and the need for a shift to post-quantum cryptographic standards.
Quantum computing poses a significant threat to conventional cryptographic systems that rely on the difficulty of mathematical problems such as integer factorization and discrete logarithms. These systems underpin much of the current security infrastructure, including public key cryptography and digital signatures. As quantum computers approach practical viability, there is an urgent need to transition to quantum-resistant cryptographic solutions that can secure digital communications against adversaries equipped with quantum capabilities. This paper explores the landscape of quantum-resistant cryptography, focusing on those algorithms that have emerged either as standards or as leading algorithm. Furthermore, the paper examines the progress of standardization efforts, such as the National Institute of Standards and Technology (NIST) Post-Quantum Cryptography (PQC) initiative, and the implications of deploying these algorithms in existing systems. By addressing the practical considerations for adoption, this study aims to provide a comprehensive overview of the current state and future directions of quantum-resistant cryptography, ensuring robust security in a post-quantum world.