Kumiko: I heard quantum could break Bitcoin’s security. But I haven’t found a single resource that lays out in simple terms what the risk is. Can you help?
Ethan: Absolutely. I love explaining complex topics in simple ways. Let’s break the topic down step by step. First, it helps to know how Bitcoin stays secure: it relies on two cryptographic tools—one for authorizing transactions, and one for mining blocks.
Kumiko: Okay. What are those two called?
Ethan: ECDSA – that’s the Elliptic Curve Digital Signature Algorithm. It’s what you use to sign (i.e. authorize) a transaction from your wallet. SHA-256 – Secure Hash Algorithm with a 256-bit output. Bitcoin miners use it in the proof-of-work puzzle.
Kumiko: Are those equally vulnerable?
Ethan: Not at all. SHA-256 would get only a modest speed-up from quantum algorithms—so mining might get easier, but not catastrophically so. ECDSA, on the other hand, is dramatically weaker under a large-scale quantum computer: Shor’s algorithm would let an attacker recover a private key from its public key.
Kumiko: So ECDSA is the “weak link.” Why is it at risk?
Ethan: Imagine you store Bitcoin in your house with a locked door. Your private key is the unique key that opens it. The public key is your house. The house and its door design are out there in the open, so anyone can check whether a given key will fit. But, only you hold the private key; without it, no one can open the door or spend the coins inside.
Kumiko: If only I hold the private key, how could anyone ever forge my transaction signature?
Ethan: Right now, that’s effectively impossible—without the private key, you simply can’t sign a valid transaction.
Kumiko: What about quantum computers?
Ethan: That’s where things get interesting. Classical computers can’t derive your private key from any information on the network. A powerful enough quantum computer, however, could one day run an algorithm to reconstruct your private key just from your house “door”—almost like fabricating a working key out of thin air. Wild, isn’t it?
