PQC output type discussion

The discussion revolves around the complexities and challenges associated with changing user behaviors and design workflows in cryptocurrency wallet designs to enhance security against potential quantum computing threats. The primary concern highlighted is the widespread practice of address reuse and the sharing of public keys or xpubs, which could compromise security. Addressing these issues requires not only better educational efforts but also significant modifications in wallet functionalities to discourage such practices.

Further exploration into the dialogue reveals a deep skepticism about the effectiveness of education alone in altering entrenched behaviors like address reuse. It's suggested that providing users with more straightforward, safer workflow alternatives might be more effective than trying to educate them on the nuances of security risks, especially given the general tendency of users to ignore warnings and stick to familiar routines. This approach aligns with the broader view that any successful change in user behavior will require enhancements that fit seamlessly into existing workflows rather than expecting users to adapt to new complexities.

On the technical side, there is an ongoing debate between proponents of different cryptographic models, particularly P2MR (Pay-to-MerkleRoot) and P2TRv2 (Pay-to-Taproot V2), regarding their efficacy and readiness for a post-quantum world. The discussion touches upon the need for new wallet descriptors that incorporate both xpubs and static stateless Post-Quantum Cryptography (PQC) public keys or pubkey hashes. Such changes aim to maintain compatibility with current use cases while enhancing security to mitigate risks associated with quantum computing.

Moreover, critiques are made regarding current proposals and the incremental nature of upgrades like CISA, which aim to introduce quantum resistance alongside other optimizations. Concerns focus on whether these measures truly address the fundamental security needs or simply adjust economic variables like transaction fees without resolving underlying vulnerabilities. The suggestion to prioritize drop-in replacements that minimize workflow changes encapsulates the tension between enhancing security and maintaining user adoption rates.

Finally, perspectives on economic incentives and technological adoption underscore the complex interplay between security upgrades and user behaviors. The consensus seems to lean towards minimizing changes that would alienate users or complicate their interactions with technologies, suggesting a more conservative approach to implementing quantum-resistant features in cryptocurrency systems. This cautious stance reflects a broader uncertainty about the pace of quantum advancements and their immediate impact on cryptographic systems.