PQC output type discussion

The recent discussions around the implementation of P2TRv2 for Bitcoin have highlighted several critical considerations that go beyond merely upgrading from previous versions. It is becoming increasingly clear that integrating P2TRv2 requires more than just a simple modification, such as "bumping the witness version." Instead, it necessitates a complete overhaul in how wallet developers approach key derivation methods.

Unlike earlier expectations, the adaptation of P2TRv2 is not necessarily easier compared to supporting P2MR. One significant challenge lies in the need for new wallet standards that ensure the secure derivation of post-quantum (PQ) keys. This shift demands moving away from the established BIP32 standard to a new, yet-to-be-defined multi-algorithm HD wallet standard. Such a transition would involve not only theoretical development but also practical implementations, including the integration of PQ key generation algorithms and their validation against static test vectors.

For further insights into these technical requirements and the ongoing discussion within the developer community, one can refer to the detailed thread available on the Bitcoin dev Google group here. This conversation underscores the complexities involved in evolving Bitcoin's infrastructure to accommodate new security paradigms necessary in a potentially post-quantum cryptographic environment. Therefore, any wallet developer intent on maintaining relevance and security in this evolving landscape must consider these extensive modifications and integrations.