Nostr Web Client

What about P2TR addresses exposing the public key? Wouldn't that be quantum vulnerable?

Thanks nostr:nprofile1qqsdlumwtmnqqdqnhzn2yc2azuftg57z380wq47fp62pds7tme2n7gspzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtc4j5yaw for giving an answer with some details, and nostr:nprofile1qqsptacwh5c0dxu9hw58c0ky2eznqrwzsddxmtprtl0czs72kh5jstqpz3mhxue69uhkuethwvh82arcduhx7mn99uqjqamnwvaz7tmzd96xxmmfdekkz7rfd4skc6tnw3ejummwd35kuef0qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uwkfddv for raising the quantum-resistance point about TR

While witnesses have a discount, normal monetary transactions also benefit from the same discount as they also use the witness

What concretely could be done differently? Maybe the discount should apply only to small witnesses, so that larger - potentially spammy - witnesses pay more? (It's too late to include this change to the discount rules, as it's a consensus change, but I'm just curious to discuss these issues to learn more)

Reply to this note

Please Login to reply.

Discussion

ᴛʜᴇ ᴅᴇᴀᴛʜ ᴏꜰ ᴍʟᴇᴋᴜ 3mo ago

segwit should be deprecated and wallets should encourage users to move their UTXOs to taproot

quantum resistance is a far future risk. the best option we have currently for switching to quantum resistant signatures and ECDH is an algorithm called VDOO which has 96 byte signatures. so such an upgrade is not really feasible before 5 years when there might also be low enough storage prices to justify such a switch. the danger of bitcoin addresses being cracked is completely unrealistic in the short term (less than 10 years). the smallest economic UTXO to attack right now is over 800btc and it would take about 2 weeks to do it, assuming someone builds a big enough machine to do it, which is gonna cost upwards of 50 million dollars in the first place, plus that much again to power it for such an attack.

also, segwit witness discount does not make transactions as much cheaper as taproot. taproot can combine multiple signatures allowing many UTXOs to be merged with only one signature block.