0age
@0age
imagine ECDSA is demonstrated to be broken by quantum computing tomorrow now everyone’s scrambling to move funds into a smart wallet with quantum-resistant signature verification ASAP what’s the best implementation of this currently out there? does one even exist?
9 replies
12 recasts
75 reactions
Dan Romero
@dwr.eth
curious if @vitalik.eth has thought about this
4 replies
31 recasts
35 reactions
EulerLagrangodamus
@eulerlagrange
Sha256 and similar hash functions are considered quantum safe. STARKs use hash functions heavily and so are also considered quantum safe. So in a pinch you could hard fork an upgrade where everyone switches to a new key, and a zk proof of knowledge is used for the new private key instead of normal signatures.
2 replies
0 recast
7 reactions
0age
@0age
i'm thinking no time for hard fork, like literally being blindsided and seeing coins start moving out of big accounts granted, everything likely goes to zero in this scenario but my point is what could one individual do to protect themselves from falling victim before social coordination can step in
3 replies
0 recast
1 reaction
EulerLagrangodamus
@eulerlagrange
There’s nothing you can do. Ethereum POS and most wallets are secured by elliptical curves over finite fields. So if someone gets a QC tomorrow that can break it we’re pretty much fucked. You can compute a private key pretty quickly. There’s no good way to distinguish real owner from attacker. —- To protect yourself you can use a smart contract wallet with an auth mechanism that’s quantum safe. Would be alot of gas.
2 replies
0 recast
3 reactions
0age
@0age
if you come across an implementation of a quantum-resistant smart wallet, do share; gas price be damned 🤣
3 replies
0 recast
1 reaction
EulerLagrangodamus
@eulerlagrange
You can do it pretty cheap with a commit and reveal scheme. You generate a secret, and public key is hash of it. A few complications to setup, but you could make the auth cheap. Downside is you’d have to rotate keys after every tx. My guess is it will be better if we preserve static keys
0 reply
0 recast
1 reaction
Joaquim Verges
@joaquim
What about a SCW with a p256 signer (webauthn)?
1 reply
0 recast
1 reaction
Mike
@mhathaway
Pauli Group have been working on this problem: https://pauli.group/ They claim to have a quantum-proof smart contract wallet live today
0 reply
0 recast
0 reaction
