On November 4, Bitcoin developer Cory Fields posted a proposal to the Bitcoin development mailing list detailing a system to deter quantum attacks through a novel auction mechanism. Fields’s “quantum landmines” would force potential thieves to stake their own Bitcoin as collateral, turning attempted thefts into costly gambles.
The system targets Bitcoin outputs with exposed public keys, which are particularly vulnerable to attacks using Shor’s algorithm, a mathematical technique a quantum computer could employ to steal funds. “Think of it as a sealed ownership receipt,” Fields explains, outlining a pre-emptive measure to protect wallets before the hypothetical arrival of a quantum computer capable of breaking Bitcoin’s encryption.
Quantum Landmines Deter Theft via Collateral
Fields’s proposal introduces a system where potential thieves must stake their own Bitcoin as collateral, a mechanism designed to disincentivize attacks on older wallets. This collateral requirement activates when a quantum computer successfully recovers a private key associated with a vulnerable Bitcoin output, forcing the attacker to deposit an equivalent amount of quantum-safe Bitcoin. Both the stolen and collateralized coins then enter a restricted output, subject to a 30-day challenge period before the funds become freely spendable.
This hidden proof allows the original owner to claim the combined funds, their original Bitcoin plus the thief’s collateral, if an unauthorized transfer attempt occurs. The effectiveness of this approach hinges on the attacker’s inability to predict which legacy wallets contain these hidden receipts, potentially turning a successful quantum key recovery into a net loss. Beyond the collateral system, Fields proposes a “staked auction” to further deter theft.
This secondary mechanism allows individuals to lock up quantum-safe Bitcoin and register a bid against specific old wallets they anticipate will be targeted. If an attacker attempts to move funds from one of these wallets and posts collateral, the pre-committed bidder can challenge the transaction, initiating an auction-like contest. This escalating bid resembles a high-stakes game where the cost of pursuing the theft could exceed the value of the stolen coins, potentially discouraging attackers altogether.
Shor’s Algorithm Threat & Vulnerable Bitcoin Outputs
Shor’s algorithm poses a defined threat to Bitcoin security, specifically targeting outputs with exposed public keys, as a quantum computer using this technique could calculate a private key from its public counterpart. This vulnerability isn’t uniform across all Bitcoin wallets. Older formats and some newer ones reveal public keys, while others obscure them until a transaction is initiated, creating a tiered risk profile as the hypothetical “Q-Day” approaches. No currently available computer can execute this attack, but the potential for future quantum decryption drives the search for preventative measures.
Trade-offs of Maintaining Spendable Legacy Bitcoin
Fields’s proposal introduces a complex economic deterrent to quantum theft, requiring potential attackers to deposit Bitcoin as collateral before initiating a transaction from wallets with exposed public keys. This collateral isn’t simply held; it becomes vulnerable to a counter-claim by an individual who pre-committed a stake against that specific wallet, introducing a novel auction dynamic to Bitcoin security.
The system anticipates that even successful decryption of a vulnerable wallet could result in a net loss for the attacker, potentially deterring attempts to compromise older Bitcoin holdings. However, maintaining spendability of legacy Bitcoin while implementing these defenses presents significant trade-offs, as Bitcoin itself lacks the ability to distinguish between an original owner and a quantum thief both capable of generating a valid signature.
Fields acknowledges that honest owners may need to lock up substantial collateral to move their own funds, creating a barrier to access for those who haven’t proactively secured their holdings. Landmines only work when an owner prepares one before Q-Day and reveals it in time. They cannot protect coins whose keys are already lost, including some of the early Bitcoin holdings widely believed to be inaccessible.
The proposed “staked auction” mechanism, where individuals secretly register bids against potentially targeted wallets, adds another layer of complexity and risk. “The attacker has no way to know in advance which old wallets contain these hidden receipts,” Fields noted, suggesting that the uncertainty itself could discourage malicious activity. Despite the potential benefits, Fields has not yet published an implementation timeline, leaving key details like auction payouts and desired outcomes unresolved, and the system remains a conceptual proposal rather than a deployed security feature.
Source: https://tech.yahoo.com/science/articles/bitcoin-developer-idea-quantum-attacks-140103654.html
See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.
