Giving teeth to expected EC disabling: P2XX(-T)(-ML)

The discussion revolves around the potential emergence of Cryptographically Relevant Quantum Computers (CRQC) and their implications. The primary utility of CRQC-capable hardware, as it stands, is to challenge classical cryptography, making its development either a scientific endeavor or adversarially motivated. The argument posits that the more the world transitions to Post-Quantum Cryptography (PQC), the lesser the incentive to develop CRQC for adversarial purposes.

Furthermore, the dialogue touches upon the technical aspects of quantum computing in relation to blockchain technology, specifically Bitcoin. It's noted that the complexity of quantum calculations (qubit count) hinges on the size of the field required to represent curve coordinates, while the necessity for larger gate counts escalates with the group size due to increased operations in point multiplication. This insight underlines the sophistication and computational demands of implementing quantum-resistant features in blockchain systems.

Additionally, there's a critique of the current capabilities of user software in the blockchain ecosystem, particularly concerning its inability to integrate advanced security features like tripwires in transaction outputs (OP_RETURN). This limitation restricts proactive security measures against quantum threats. However, an alternative method suggested involves triggering responses through scriptPubKey, which simplifies the cost accounting processes involved.

Lastly, the conversation delves into the strategic choices facing the community regarding the integration of quantum-proof cryptographic methods. There's a division between supporting adversarially constructed proofs, which would necessitate specific constructions like AJ's BIP-340 signature model, and opting for simpler, more random fixed points that do not require complex setups such as using UTXO triggers or specific hash derivations. This distinction underscores the broader strategic decisions that need to be considered to enhance future resilience against quantum threats in the blockchain domain.