What does "post-quantum" actually mean for a Bitcoin L2 when settlement still happens on a non-PQ L1?

This discussion primarily revolves around the vulnerability due to the interaction between off-chain elements secured against quantum attacks and the foundational Layer 1 (L1) blockchain, which remains dependent on non-quantum-resistant cryptographic methods like ECDSA/Schnorr over secp256k1. This mismatch exposes potential risks, particularly during the settlement phases on the non-PQ secure L1 blockchain.

The conversation delineates the complexities involved in 'peg-in' and 'peg-out' processes. The former, which involves depositing assets into the blockchain, inherently requires a classical signature for constructing the transaction, embedding a fundamental challenge that would necessitate modifications to Bitcoin’s core signature scheme itself. On the other hand, the 'peg-out' process seems relatively more manageable. It could potentially be refined to involve a commitment-based claim, where a classical signature is needed only at the final withdrawal stage, thus minimizing exposure to quantum threats.

Furthermore, the dialogue extends beyond the specific project to broader applications such as BitVM-based bridges or Lightning Network transactions. These setups perform substantial cryptographic operations off-chain but settle on a blockchain that is not quantum-resistant. This scenario underscores the inherited vulnerabilities from the L1 blockchain, regardless of the security measures employed at the L2 level. Despite this, the value of implementing PQ security at the L2 does not solely rest on fund security; it also encompasses other aspects like privacy protection, which are essential for future-proofing against quantum computing advancements.

In addition, the discussion touches on the potential for transitioning to quantum-resistant solutions on Bitcoin’s L1, such as P2QRH (BIP-360), QuBit, or Lamport signatures in Script. An off-chain layer already employing PQ measures could swiftly adapt to these changes without needing significant redesigns or risking users' funds, illustrating proactive steps being taken within the community to address these challenges.

Lastly, the reference to an external resource on PQ security for the Bitcoin Lightning Network's off-chain components (here) suggests an ongoing effort to enrich the community's understanding and preparedness against quantum threats. This resource likely offers insights and solutions pertinent to enhancing PQ security across Bitcoin’s network layers, contributing to the broader discussion and development of quantum-resistant blockchain technologies.