PQC output type discussion

The discussion revolves around the implementation and implications of P2TRv2 and CISA within Bitcoin’s framework, addressing both their potential and limitations. The initial misunderstanding that P2TRv2 would support a post-quantum cryptographic scheme has been clarified; it does not inherently include such features, which dilutes its appeal unless coupled with additional modifications. However, the concept of integrating a novel witness scheme to potentially allow for future post-quantum adaptability is presented as feasible. This could involve modifying BIP141 to incorporate a new witness weight unit that might be discounted from the current 4 MB block size limit, though this would require verification through code path analysis in the CheckBlock() function.

Additionally, there are concerns about the practical execution of CISA, particularly regarding transaction aggregation—whether it will be handled by wallets alone without special support from network full-nodes, and the risks associated with such an approach. Previous instances in other cryptocurrencies, like Mimblewimble, have shown that naive implementations can lead to privacy issues, as detailed in the analysis by Dragonfly Research. These precedents underscore the need for careful consideration and possibly suggest a more integrated network-level solution to avoid similar vulnerabilities.

The broader context of Bitcoin's development strategy is also touched upon, emphasizing the need for gradual, well-reviewed soft-fork changes especially concerning post-quantum adjustments which may span several years. There is skepticism about prioritizing changes that primarily enhance privacy and performance (as with CISA) over those that fortify network security. The discourse suggests a community-driven approach where consensus changes undergo rigorous scrutiny and testing, backed by substantial expert involvement as seen in previous successful updates like Taproot/Schnorr. This ensures that any proposed changes do not just respond to external pressures but are intrinsically aligned with the long-term security and viability of the Bitcoin network.