Coinbase, which holds 5% of all bitcoin, wants the quantum fix started now
Coinbase urges Bitcoin to prepare for quantum computers now, recommending flexible post-quantum signatures and a separate debate for dormant wallets to avoid delays in security upgrades.
Intelligence analysis by Gemini 2.5 Flash
Coinbase, a major holder of Bitcoin, is advocating for immediate action to implement quantum-resistant cryptography for the network, citing the potential threat of quantum computers by 2029. They propose flexible signature types and a phased adoption, while suggesting that the issue of lost or unmigrated coins be handled distinctly to prevent stalling the overall security upgrade.
Imagine your piggy bank has a special lock that only you can open with your secret key. Scientists are building super-smart computers that might be able to guess your secret key just by looking at your piggy bank's public slot. Coinbase, like a super-responsible bank, wants to change the locks on all Bitcoin piggy banks *now* to new, super-duper secure ones before those smart computers are ready, so everyone's money stays safe.
Analysis
CRQC
Coinbase is sounding the alarm about the potential threat posed by Cryptographically Relevant Quantum Computers (CRQCs), which Google Researchers project could emerge as early as 2029. These advanced machines would possess the capability to reverse-engineer private keys from public keys, effectively breaking the current cryptographic methods like ECDSA and Schnorr that secure Bitcoin transactions. Such a development could lead to the draining of vulnerable Bitcoin wallets, posing an existential risk to the network's security and the vast holdings it protects.
The urgency of Coinbase's call stems from the inherent challenges of implementing significant changes within Bitcoin's decentralized ecosystem. Unlike centralized systems, Bitcoin's consensus changes and ecosystem migrations are notoriously slow, often taking years to achieve widespread adoption. Therefore, the exchange stresses the importance of initiating preparatory work "well ahead of any CRQC announcement" to ensure that the network is adequately fortified before the quantum threat materializes. This proactive stance aims to mitigate the risk of a reactive scramble that could leave assets exposed.
P2MR
To address the quantum threat effectively, Coinbase advocates for a flexible approach to Bitcoin's transaction format, specifically suggesting designs that can support new post-quantum (PQ) signature types without necessitating a complete overhaul of the entire system. This modularity would significantly ease the process of integrating, replacing, or combining quantum-resistant signatures as cryptographic research evolves and new standards emerge. The goal is to build a future-proof infrastructure that can adapt to advancements in quantum computing.
The exchange points to existing proposals such as P2MR (BIP-360) and P2TRv2 as examples of solutions that offer this desired flexibility. These proposals aim to create a "container" for signatures that is agnostic to the underlying cryptographic method, allowing for seamless upgrades to quantum-resistant algorithms. By separating the signature type from the core transaction structure, Bitcoin can evolve its security mechanisms more gracefully and efficiently, ensuring continuous protection against emerging threats without disrupting network operations.
1-of-2
Coinbase supports a staged protection strategy, allowing active wallets to begin utilizing quantum-resistant or hybrid signatures even before Bitcoin finalizes its comprehensive rules for older signature types. This incremental adoption model is crucial for a decentralized network, as it avoids forcing an immediate, universal switch that could lead to user confusion or accidental loss of access. The phased rollout ensures a smoother transition and allows early adopters to secure their funds proactively.
One specific transition mechanism proposed is a "1-of-2" setup, where the same bitcoin could be spent using either a traditional ECDSA or Schnorr key, or a newly adopted post-quantum key. This dual-key approach provides a safety net, enabling users to protect their assets with advanced cryptography while maintaining compatibility with existing systems. Furthermore, Coinbase highlights the importance of considering both stateful and stateless post-quantum signature schemes, recommending support for stateless options to reduce the risk of misuse and lost funds associated with tracking "state" information after each signature.
Key points
- Coinbase urges immediate action to prepare Bitcoin for quantum computers, which could crack current encryption by 2029.
- They propose flexible transaction formats (like P2MR/BIP-360) to easily integrate new post-quantum signatures.
- A staged adoption approach, such as a "1-of-2" key setup, would allow early protection for active wallets.
- Coinbase recommends addressing the issue of dormant or lost coins separately to avoid delaying broader security upgrades.
- The exchange emphasizes supporting both stateful and stateless post-quantum signature options for user safety.
If Coinbase's recommendations are adopted promptly, Bitcoin could proactively secure its network against future quantum threats, ensuring the long-term safety of its vast holdings and maintaining user confidence. This early action would demonstrate the network's adaptability and resilience, potentially setting a standard for other cryptocurrencies.
Delays in implementing quantum-resistant solutions, particularly due to the complexities of Bitcoin's decentralized governance and the contentious debate over dormant wallets, could leave a significant portion of Bitcoin vulnerable. If a cryptographically relevant quantum computer emerges before widespread adoption of new security measures, it could lead to widespread theft and a severe loss of trust in the network.
