PQC output type discussion

A key proposal in this regard is the adoption of a P2TRv2 output type, which introduces emergency PQC features like Tripwire and Miner Lockdown, alongside a hash-based PQC signature opcode. This approach is designed to facilitate easy adoption by maintaining fee structures akin to current models and minimizing changes that might hinder developers and users. Additionally, a dual strategy involving a P2MR-based output type for a more comprehensive but slower transition post-cryptographically relevant quantum computer (CRQC) emergence is also discussed. This strategy acknowledges the complexity and potentially slower adoption rates due to significant infrastructural changes required.

The debate extends into the specifics of Bitcoin transaction output variations, such as P2MR and P2QR, with each addressing different aspects of quantum resistance and efficiency concerns. For instance, the P2MR model, detailed in BIP 360, utilizes a Merkle root to store transactions, which keeps EC points off-chain until necessary. On the other hand, proposals like P2TRH introduce elements like Public Key Recovery (PKR) to reduce explicit exposure of public keys, thereby saving space and aligning with new BIP-340 variants. These discussions reflect an active community exploration towards securing Bitcoin against emerging cryptographic challenges, balancing between immediate protective measures and robust long-term strategies.

Recent implementations, such as BIP-360 P2MR in Bitcoin Core on the regtest network, offer insights into transaction efficiency across various configurations. Detailed measurements have shown significant differences in transaction efficiencies depending on the script paths and input side configurations used. Such insights are crucial for future enhancements in Bitcoin’s transaction efficiency and cost-effectiveness, as detailed here.

In addition, the discourse emphasizes the urgency of proactive integration of PQC into systems like Bitcoin, underlined by Scott Aaronson’s perspective against waiting for clear milestones in quantum computing advancements. The discussion analogizes quantum computers to fission reactors, requiring controlled stability over time, contrasting with the explosive device comparison often made. This nuanced understanding underscores the importance of strategic development in the field of quantum computing, aiming for a controlled and effective integration of PQC.

Finally, the conversation also delves into practical implications and challenges in adopting new PQC-enabled Bitcoin transaction types, with a focus on potential economic impacts and user migration incentives. Discussions around CISA’s output type suggest it could significantly enhance efficiency, prompting broader adoption even among those indifferent to PQ-security. However, complexities involved in spec’ing and softforking such advanced output types might slow down widespread PQC adoption due to increased implementation complexity. This balance between technological advancement and practical deployment considerations reflects the ongoing efforts to ensure Bitcoin remains secure and functional in the face of evolving quantum computational capabilities.