Changes to BIP-360 - Pay to Quantum Resistant Hash (P2QRH)

Jul 7 - Jul 18, 2025

  • The dialogue opens with a recommendation against using the term "Quantum resistant" in a Bitcoin Improvement Proposal (BIP) focused on the Pay to TapScript Hash (P2TSH) concept, highlighting that it no longer specifies any post-quantum signature algorithm opcodes for use within the Merkle Abstract Syntax Tree (MAST).

An innovative proposal is introduced, suggesting the incorporation of a mechanism similar to SPHINCS - a hash-based signature scheme - into BIP360. This would allow for dynamically defining tapscript leaves at spending time, enabling users to move funds to quantum-safe addresses without the immediate definition of post-quantum (PQ) opcodes. The suggested approach offers several advantages, including soft-fork compatibility, protection against quantum attacks before public disclosure of an OTS endorsement signature, and the ability to dynamically select script pubkeys for an address, potentially fostering new use cases.

Further discussions explore the technical aspects of implementing Taproot and the potential of Segregated Witness (SegWit) version 1 in supporting non-256 bit payloads, indicating a broader utility beyond its original design. The conversation stresses the importance of selecting appropriate protocol versions based on payload size to optimize space on the blockchain, reflecting on the confusion surrounding versions due to the 0-based numbering system used. This underscores the ongoing efforts to refine blockchain protocols for enhanced scalability, efficiency, and versatility.

Privacy concerns associated with MAST usage are addressed, pinpointing vulnerabilities like the distinguishability of outputs and the revelation of information upon spending a MAST root output. A proposed 'taproot v2' aims to maintain privacy by allowing standard taproot spend actions while adding the functionality of presenting the MAST root as the preimage of the output. However, this proposal does not tackle quantum resistance, relying on the security assumption tied to SHA256's integrity.

Alternative uses of SegWit versions as markers for different transaction output types are debated, suggesting a departure from their sequential identification role. This method aims to simplify output type identification, enhancing usability by making the system more intuitive. Yet, concerns arise regarding potential technical and usability complications, emphasizing the need for community consensus.

Discussions also delve into the security implications of P2QRH in protecting against long-exposure attacks, highlighting strategic choices for SegWit versions to enhance efficiency and compatibility. The exploration of incorporating Ethereum-like features into the Bitcoin protocol raises privacy concerns, advocating for maintaining privacy-enhancing practices rather than introducing cost-saving measures that might compromise user anonymity.

In terms of collaborative development, the exchange acknowledges the significance of consensus and careful consideration in proposing improvements to Bitcoin's infrastructure. The technical selection between P2TR and P2QRH for optimizing transaction sizes and facilitating smart contract composition is examined, alongside the practicality of implementing post-quantum cryptography through added opcodes and renaming proposals to reflect broader applicability.

Lastly, modifications to BIP-360 emphasize transitioning to a script-only version of Taproot (P2TR), excluding quantum-vulnerable key-spend pathways to bolster security against quantum computing threats. This approach simplifies implementation, enhances protection against long-exposure attacks, and outlines a forward-looking plan for integrating PQ signature verification opcodes, setting a foundation for future-proofing the Bitcoin protocol against evolving quantum computational capabilities.

Bitcoin Logo

TLDR

Join Our Newsletter

We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.

Explore all Products

ChatBTC imageBitcoin searchBitcoin TranscriptsSaving SatoshiBitcoin Transcripts Review
Built with 🧡 by the Bitcoin Dev Project
View our public visitor count

We'd love to hear your feedback on this project?

Give Feedback