1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
|
Delivery-date: Sun, 06 Apr 2025 04:47:37 -0700
Received: from mail-yw1-f186.google.com ([209.85.128.186])
by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.94.2)
(envelope-from <bitcoindev+bncBAABBT6TZG7QMGQE5RVWWXA@googlegroups.com>)
id 1u1OTQ-0008C2-Pf
for bitcoindev@gnusha.org; Sun, 06 Apr 2025 04:47:37 -0700
Received: by mail-yw1-f186.google.com with SMTP id 00721157ae682-7025e56ad24sf49573977b3.1
for <bitcoindev@gnusha.org>; Sun, 06 Apr 2025 04:47:36 -0700 (PDT)
ARC-Seal: i=2; a=rsa-sha256; t=1743940051; cv=pass;
d=google.com; s=arc-20240605;
b=cqjS2Id7NfG6GPryvK1BmuqKxu/CUR8IBVTKhFN2u7+Avun27bbvhDWs1bmL9V7X1Q
qnOZevz/z+fYc6t8lWYy/GRstJxiUfylPhRXI2EHow1NSG9LzZzeBZlXbeXJJTypMwop
97hCFkFoNLAhatGkl1lW1ZkOTdW71a3TMVCX11JcO1GUWw6pmirkM1fRWDpUehm7CrSe
XQ0upSci/sQBAMxofNZkTUgDZyu7eJqQpIewCW1vJrVvAzcQcmsXUbRgOu0+nNFxY4HL
6igZjZW/qb2Cg+SdmsbSqXxFk/t9+tnE2DK3gxGYZPW3kYyq2WsfFccSi3EufVpWzVO9
jUng==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:in-reply-to:from:content-language
:references:to:subject:mime-version:date:message-id:sender
:dkim-signature;
bh=R4/sfTroUqETibU02mrdnjxoZsxJRSgI+nYS9BLyz84=;
fh=gc43Z3WyuBd6qwh3i5UjhSqtA15+86QwZmH0x/n9jO0=;
b=cFXgJoYKPhHlEYUPJo8o/sQnbz7V1JVipS8U+PGwYBXNVk0H8CgOSx8WtBOMsC7eM4
rRquzlwkQ1QWAET0TJFLsoLIyRpXskgNqCY0raJ8+XtR3DKfPPnxZp6Qm1DJiXzdw95J
ZQUOE6Ewvae9iGop3iKOHgOgpnp0a7aWC3U26UrdAy/uu7Gk0eMK0blj+slUWgPNlFcF
gpzvlnMZshO/9WI/59X42EZdGh4JtSg8ZbjKpYLAE/iBTzf68KhXaItj1taLGGFlYfoM
P/nhajL3nB/upFDAcxl6ukxp7/iWvZcNyOPZZu9viu7HR2fnc0oxC/nWp+ou5yaR1E7d
zAWQ==;
darn=gnusha.org
ARC-Authentication-Results: i=2; gmr-mx.google.com;
dkim=pass header.i=@mattcorallo.com header.s=1743872463 header.b=IZ2zIMzC;
dkim=pass header.i=@clients.mail.as397444.net header.s=1743872465 header.b=Lb10HlmF;
spf=pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) smtp.mailfrom=lf-lists@mattcorallo.com;
dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=mattcorallo.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20230601; t=1743940051; x=1744544851; darn=gnusha.org;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:in-reply-to:from:content-language:references:to
:subject:mime-version:date:message-id:sender:from:to:cc:subject:date
:message-id:reply-to;
bh=R4/sfTroUqETibU02mrdnjxoZsxJRSgI+nYS9BLyz84=;
b=PqgIdk3U+D9cJL+LiTFvkPKxa9MkjTJWbqVjLvkxaL4tQl02/0A3XqQWDml/H8NpHa
Ni/+G7b38GyE8AWxMFHJE1M8irYiKwqB5EGVZhQUX/KequbUeaW57UpbGnBPbrBDZFEe
1NiSEqFoa1EAGir+k3iZXR0ZEdNfqxYIhNoBNHEm7pPGyA4vp0oQzDwzcWVY2bTCaJvi
5Rzr5PlbYKDfmGpRlverWWOw43FEzx3AP48VQXu1WaTBtDWgLjUhCoaQ9Oxn35zFBxcj
q4f2UYoxetT1L0G57KB4+aNlrRvy05y8++/P2giQ9PLBbOHC2jD/8asXvJXqWCWQ4zpw
wEGw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1743940051; x=1744544851;
h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post
:list-id:mailing-list:precedence:x-original-authentication-results
:x-original-sender:in-reply-to:from:content-language:references:to
:subject:mime-version:date:message-id:x-beenthere:x-gm-message-state
:sender:from:to:cc:subject:date:message-id:reply-to;
bh=R4/sfTroUqETibU02mrdnjxoZsxJRSgI+nYS9BLyz84=;
b=ES5vq1NokmUwlt7i5D4Pvq2e3PG93Uc2SGwrE+NpDi9LxdJmSoDh+v8W59Jw20rCE1
O+tN+R/Uvu6UqBdLAGbu+n5QSqFgbDR8/SVkYjVLRWWwWBeCgTeR0rxf5vQ1YjloM8mq
K1H9ijEf9MtcF7Wj4VJR0eCLMpt/31/wQOfE9vQJ2rBVEttbpo9EaJbeTJICW9YJlZi+
iqoAqi4FBH7AVmG+sTZ33uueGxO6JC2SNTpr4CnIzCmfqZ3US5ElNuJaOLOmnwf2n2Ol
hiFj7CO4iz9nzg1MUExTT2KtOOY/eTeItsL2c9+TEpqDGV/llQHC1rD7aai7y2nvi63H
sKBg==
Sender: bitcoindev@googlegroups.com
X-Forwarded-Encrypted: i=2; AJvYcCWTvm3yCforIQdsVIvo4m+nlgNRumvreEy9NQr9Aj6UjFWe7llkrp65voCjBVxX6L+00hH2qtpg2U/d@gnusha.org
X-Gm-Message-State: AOJu0YxKZyw27KPLUilVSUymMWm2M27TPunJDRsgo8hUyi/jbsvu4wNt
ea9vJ1wzzvEFejb0oAKpWjBEZPxhflv9WMJq5PX+mZbF5eGdNI87
X-Google-Smtp-Source: AGHT+IHRVV6gE4hBJ5rMJqUXlnYwyV0gdaRhZ2mXa6Yud1hhkCluoabES7eAR19v3p1p/fOpIb+uQg==
X-Received: by 2002:a05:6902:2841:b0:e61:1dab:3b68 with SMTP id 3f1490d57ef6-e6e1f9b0a33mr13839860276.12.1743940050561;
Sun, 06 Apr 2025 04:47:30 -0700 (PDT)
X-BeenThere: bitcoindev@googlegroups.com; h=ARLLPAI6/tyvHr2GgOOYFx/Qo7Q+VzHVpF0fkCEO8UWUcgCung==
Received: by 2002:a25:b30c:0:b0:e6d:f8d6:b990 with SMTP id 3f1490d57ef6-e6e07a93c1els1559191276.2.-pod-prod-07-us;
Sun, 06 Apr 2025 04:47:27 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCVSz7yw8/9aVnEAMLnviyW0upr4eEA7aEeZdXpr5TsrylcXZ5DBbGdeyhY5PAJ5kndWt1h5E9K7EfoT@googlegroups.com
X-Received: by 2002:a05:690c:660a:b0:6fb:277f:f022 with SMTP id 00721157ae682-703e31439b8mr153390457b3.15.1743940047194;
Sun, 06 Apr 2025 04:47:27 -0700 (PDT)
Received: by 2002:a05:690c:b83:b0:6ef:590d:3213 with SMTP id 00721157ae682-703b7fe7b78ms7b3;
Sat, 5 Apr 2025 10:39:25 -0700 (PDT)
X-Forwarded-Encrypted: i=2; AJvYcCVuAWUL6ySHpMNziUMYNfoUW9LII4rixGKT9L9YrgcRw5NciCtdOLW8qxoEI8i4UFW5OLavRHnQzI00@googlegroups.com
X-Received: by 2002:a05:690c:4b8d:b0:703:c752:ce4e with SMTP id 00721157ae682-703e31439c3mr107890507b3.14.1743874765066;
Sat, 05 Apr 2025 10:39:25 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1743874765; cv=none;
d=google.com; s=arc-20240605;
b=hRn+DLp7n6Jlx1dhAf4b9j9LLxBx3fRYkcWXA2vJ2sg/TLzcjDzE99pJEgD6ZjohTZ
SFuIxkVLoV8bRDIKQdxicubbHts4x4AogAKkd2TUtFnUx21Mkek19i1R0QUaKmavTAed
sZwA2a4N5jgbZUJf45LrI5P+u153VqB+iHhAS483LA+r4FMjVmUDGQDF9/pYf5Ovn3DV
EJ7/mKLEyuLVHw/M9IPyAVfG6CM8ZsRg6XepAFANLjhVfb0ifZenXEK9FWtIfuZIiJMT
3wep56+aSpFWY7jjNlLC7HfDw2j8eTqp5u9kKiaHoIr4jo9B/3jWmMv/iRmtfhkkyrei
aK1Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605;
h=content-transfer-encoding:in-reply-to:from:content-language
:references:to:subject:mime-version:date:message-id:dkim-signature
:dkim-signature;
bh=RjzBJot5k39nOTHXWdNSsvovDM2BBZRHTk5lpRtBkVY=;
fh=3/7X+S7HfYKjs3F5yr3MNgyHGcK/1rwF3WNTOvF30Bg=;
b=buv26zDZqRJ0snGK+7rYFzsYEPs51zLQUxU2Bwl3RJpIXc2+kJgYLFDIoMX+JH40hl
JtI0aI6PTd5qprxAJstKOEzWRLXdkWt0ciQa2SWLdr1cAOki4vac7NHT9mpQCoKONChs
FSg8o0/oDdG2brNBbShcOC3CEgMpczSTK6bAOGoEB/ya+zdDpHzrUwIHSZM0eUa+8P6b
LPc3FsG9FGqmEL3pqmfZ6nO7Qwxx48Ftj4jCKERpMhiwot8yvsNaMimwhj2P7/17FQ/h
DZmZtyhkevCW9Ib7zZ4RuhI6s6D/LheK2hy5pa3OTf/Jv1YGT494t0WijZy6YwHjuKhB
0Ssw==;
dara=google.com
ARC-Authentication-Results: i=1; gmr-mx.google.com;
dkim=pass header.i=@mattcorallo.com header.s=1743872463 header.b=IZ2zIMzC;
dkim=pass header.i=@clients.mail.as397444.net header.s=1743872465 header.b=Lb10HlmF;
spf=pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) smtp.mailfrom=lf-lists@mattcorallo.com;
dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=mattcorallo.com
Received: from mail.as397444.net (mail.as397444.net. [69.59.18.99])
by gmr-mx.google.com with ESMTPS id 00721157ae682-703d25123e2si3504767b3.3.2025.04.05.10.39.24
for <bitcoindev@googlegroups.com>
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Sat, 05 Apr 2025 10:39:24 -0700 (PDT)
Received-SPF: pass (google.com: domain of lf-lists@mattcorallo.com designates 69.59.18.99 as permitted sender) client-ip=69.59.18.99;
X-DKIM-Note: Keys used to sign are likely public at
X-DKIM-Note: https://as397444.net/dkim/mattcorallo.com and
X-DKIM-Note: https://as397444.net/dkim/clients.mail.as397444.net
X-DKIM-Note: For more info, see https://as397444.net/dkim/
Received: by mail.as397444.net with esmtpsa (TLS1.3) (Exim)
(envelope-from <lf-lists@mattcorallo.com>)
id 1u17UJ-007NVi-0C;
Sat, 05 Apr 2025 17:39:23 +0000
Message-ID: <76c5ec26-5fd5-4746-86ed-89d2c8e28cbc@mattcorallo.com>
Date: Sat, 5 Apr 2025 13:39:21 -0400
MIME-Version: 1.0
Subject: Re: [bitcoindev] Post Quantum Signatures and Scaling Bitcoin
To: Ethan Heilman <eth3rs@gmail.com>,
Bitcoin Development Mailing List <bitcoindev@googlegroups.com>
References: <CAEM=y+XMLuGH-MAfkYanfbU3Ynduw54jDVguKxgO2xEtnSEkZg@mail.gmail.com>
Content-Language: en-US
From: Matt Corallo <lf-lists@mattcorallo.com>
In-Reply-To: <CAEM=y+XMLuGH-MAfkYanfbU3Ynduw54jDVguKxgO2xEtnSEkZg@mail.gmail.com>
Content-Type: text/plain; charset="UTF-8"; format=flowed
X-Original-Sender: lf-lists@mattcorallo.com
X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass
header.i=@mattcorallo.com header.s=1743872463 header.b=IZ2zIMzC;
dkim=pass header.i=@clients.mail.as397444.net header.s=1743872465
header.b=Lb10HlmF; spf=pass (google.com: domain of lf-lists@mattcorallo.com
designates 69.59.18.99 as permitted sender) smtp.mailfrom=lf-lists@mattcorallo.com;
dmarc=pass (p=NONE sp=REJECT dis=NONE) header.from=mattcorallo.com
Precedence: list
Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com
List-ID: <bitcoindev.googlegroups.com>
X-Google-Group-Id: 786775582512
List-Post: <https://groups.google.com/group/bitcoindev/post>, <mailto:bitcoindev@googlegroups.com>
List-Help: <https://groups.google.com/support/>, <mailto:bitcoindev+help@googlegroups.com>
List-Archive: <https://groups.google.com/group/bitcoindev
List-Subscribe: <https://groups.google.com/group/bitcoindev/subscribe>, <mailto:bitcoindev+subscribe@googlegroups.com>
List-Unsubscribe: <mailto:googlegroups-manage+786775582512+unsubscribe@googlegroups.com>,
<https://groups.google.com/group/bitcoindev/subscribe>
X-Spam-Score: -0.8 (/)
On 4/4/25 12:29 PM, Ethan Heilman wrote:
> I strongly believe Bitcoin will need to move to PQ signatures in the
> near future. The rest of this email is premised on this belief.
Whether this is true or not, none of the non-hash-based PQC signature schemes seem like reasonable
candidates to include in Bitcoin's consensus today (as far as I'm aware no sensible cryptographer
anywhere is suggesting migrating to only PQC schemes given the likelihood that they end up broken by
classical methods at some point in the next decade, which makes putting them in Bitcoin's consensus
for the long term an incredibly questionable idea). Worse, making STARKs a part of Bitcoin's
security assumption seems even more far-fetched.
While this is all cool, I don't really see how this is a viable path any time in the next decade,
sadly. If you believe that we need a PQ signature scheme in the near future, it seems to me the only
option is something hash-based and we eat the cost (optionally, see eg [1]).
[1] https://groups.google.com/g/bitcoindev/c/oQKezDOc4us/m/F-Pq-Jw2AgAJ
--
You received this message because you are subscribed to the Google Groups "Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an email to bitcoindev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/76c5ec26-5fd5-4746-86ed-89d2c8e28cbc%40mattcorallo.com.
|