Posted by EthanHeilman
Jul 21, 2025/15:21 UTC
The correspondence delves into the intricacies of enhancing security within Bitcoin transactions, particularly focusing on mitigating vulnerabilities against quantum attacks. The primary discussion revolves around the concept of protecting EC public keys embedded in wallet descriptors from being exploited by quantum attackers, even before an OTS (One-Time Signature) endorsement signature is publicly revealed. This approach is aimed at countering long exposure attacks on reused public keys, a prevalent concern within the cryptocurrency domain.
The proposal suggests an innovative yet straightforward mechanism to safeguard transactions without necessitating significant modifications to the existing P2QRH framework. By integrating a requirement that spending transactions must provide both a preimage and a signature that satisfy specific cryptographic conditions, it establishes an additional layer of security. This method effectively shields against long exposure attacks by ensuring that each transaction leaf possesses a unique preimage, thereby complicating unauthorized access through public key reuse.
Further expanding on potential enhancements, the conversation references a technique detailed in the document "Signing a Bitcoin Transaction with Lamport Signatures," accessible via a Google Groups link. This approach offers a marginal improvement by employing Lamport Signatures within the P2SH (Pay to Script Hash) transactions, albeit with limitations due to operational constraints imposed by the current script execution environment, which restricts the feasible key space and thus remains susceptible to brute-force attacks.
Adam Borcany's critique underscores the necessity for a more robust OTS scheme tailored for script endorsements, suggesting the possibility of introducing this as a new script leaf version through a dedicated BIP (Bitcoin Improvement Proposal). This proposal signifies an acknowledgment of the need for a more concrete and elaborated framework to effectively counteract the specified security threats, indicating a direction for future research and development in enhancing Bitcoin's resilience against quantum computing threats.
TLDR
We’ll email you summaries of the latest discussions from authoritative bitcoin sources, like bitcoin-dev, lightning-dev, and Delving Bitcoin.
We'd love to hear your feedback on this project?
Give Feedback