Giving teeth to expected EC disabling: P2XX(-T)(-ML)

Developers are considering mechanisms that could preemptively disable Elliptic Curve (EC) opcodes/paths, with two primary proposals emerging: the Tripwire and Miner Lockdown mechanisms. The Tripwire approach uses a transaction type as a trigger, which would deactivate EC opcodes/paths immediately upon detection of a specified condition in a transaction. This method ensures a definitive timeline for the disabling and prevents indefinite delays. Conversely, the Miner Lockdown allows a majority of mining hashrate to initiate the disabling, offering a faster response to threats.

The integration of these mechanisms enhances network security and encourages the adoption of Post-Quantum Cryptographic methods, aligning with the decentralized nature of cryptocurrency by enabling user participation in consensus decisions. These changes are embedded directly into the consensus rules to ensure reliable enactment when needed, without requiring additional agreements or forks. This proactive strategy is crucial for mitigating risks associated with quantum computing's impact on current cryptographic practices used in blockchain technologies.

However, concerns have been raised about the implementation specifics and potential unintended consequences of these mechanisms. For instance, the risk of false-positive activations during Miner Lockdowns could mistakenly lock out legitimate operations due to conventional security breaches, rather than actual quantum threats. Suggestions have been made to refine the balance between security and functionality, such as allowing the reactivation of the EC path if a lockdown was triggered by a false alarm. Moreover, strategic considerations include implementing a delay between the signaling and activation phases of the Miner Lockdown to provide flexibility for users uncomfortable with immediate changes.

Another topic of discussion involves the technical feasibility of integrating a tripwire mechanism that utilizes a 128-byte value, "aRsm," to trigger the disabling of EC paths. This setup would simplify verification processes and maintain network integrity through stringent consensus requirements. Additionally, there are proposals for handling proof without requiring a quantum computer, using a fake NUMS point in test code, which integrates a peer-to-peer messaging system for distributing this proof efficiently.

Despite these advanced proposals, there are significant reservations regarding the reliance on miner cooperation and the economic incentives that might lead miners to bypass security measures for financial gain. The complexity of predicting future actions by miners and designing effective countermeasures adds another layer of challenge to implementing these security enhancements reliably.

Overall, these discussions highlight the dynamic and complex nature of blockchain technology development, where security, functionality, and consensus must be carefully balanced to address both current and future threats.