Giving teeth to expected EC disabling: P2XX(-T)(-ML)

The discussion among programmers regarding the deployment and implications of quantum computing on cryptographic systems, particularly Bitcoin, reveals a deep engagement with both technical and strategic aspects of future security challenges. Pieter Wuille highlights the distinction between "canary" and "tripwire" systems in blockchain security. A canary serves as a social signal to encourage consensus towards activating a soft fork, while a tripwire automatically initiates changes to the consensus rules without human intervention. This differentiation is crucial as it impacts how responsive and resilient a system can be against potential quantum computational threats.

The debate extends into the practicality and necessity of preparing for quantum attacks that might target specific cryptographic standards, such as 192-bit vs. 256-bit curves. The consensus leans towards the use of 256-bit curves as they offer less ambiguity about the security status—thus indicating a clearer signal for necessary action if compromised. Interestingly, the conversation also addresses the efficiency of Shor's algorithm and its impact on quantum computing resources. It is suggested that the qubit requirements are primarily influenced by the group order sought in discrete logarithm problems rather than the field size, which mostly affects the runtime complexity.

Further, there is an intriguing suggestion from the email thread to avoid linking the canary to any specific Unspent Transaction Output (UTXO) or script. This approach would potentially reduce the risk of miner collusion and censorship since blocking the canary proof would require miners to reject all transactions containing the proof, thus forfeiting transaction fees. This strategy could democratize the submission of proofs by incorporating them in transactions at minimal cost, although it might increase block validation times slightly due to additional elliptic curve multiplications required per transaction.

Lastly, the discussion refers to a paper proposing an incremental approach to deploying canaries across a sequence of increasingly robust curves to better gauge the threat landscape posed by quantum computers. This method could provide a more granular understanding of quantum capabilities over time (read the paper here). This conversation underscores the complexities and strategic considerations inherent in securing blockchain technologies against emerging quantum threats, emphasizing a proactive and nuanced approach to cryptography in the face of advancing quantum computing.