Ledger CTO Warns Bitcoin’s Quantum Migration Could Take Years as Wallet Risks Come Into Focus

Bitcoin does not face a near-term quantum-computing threat, according to Ledger chief technology officer Charles Guillemet, though it may take years to prepare the network for a post-quantum world.

Guillemet analyzed SHRINCS, an unfinished Bitcoin-specific hash-based scheme consisting of a short stateful signing path based on Flexible XMSS and WOTS+C signatures. It also contains a long stateless recovery path based on ideas from the SLH-DSA signature algorithm.

The target security level for this specification is about 128 bits of classical security and 64 bits of quantum security, but it is still in draft form without a full security proof.

Bitcoin wallets today use ECDSA and Schnorr signatures, which could be broken by a quantum computer running Shor’s algorithm, should such a cryptographically relevant quantum computer be practical and built — no such quantum computer is publicly known to exist.