A US company focused on post-quantum security has proposed a new solution that aims to allow blockchain wallets such as Bitcoin to maintain their existing address system in the event of a quantum computing attack in the future, without having to migrate funds on a large scale.
This research was published by AmericanFortress, a Wyoming-based blockchain security and cryptography company. The paper proposes replacing traditional elliptic curve signatures with zero-knowledge proofs while maintaining compatibility with hierarchical deterministic wallets. Researchers claim this allows for continued proof of wallet control without exposing the seed phrase.
The plan targets the existing wallet system.
The paper is titled "ZKPoSP: Post-Quantum Zero-Knowledge Proofs for Layered Deterministic Wallets". The core idea is to change the proof of wallet ownership from "private key signing" to "zero-knowledge proofs based on seed source".
Researchers believe that once quantum computing reaches a stage where it can practically break cryptography, fault-tolerant quantum computers running Shor's algorithm may be able to deduce private keys from public keys. The elliptic curve cryptography currently used by Bitcoin and many blockchains could then face risks.
Unlike methods that require users to transfer funds to entirely new quantum-resistant addresses, this approach aims to preserve the existing address structure. The paper states that even if a single private key is compromised in the future, as long as the seed phrase remains intact, the legitimate holder can still prove control of the wallet using zero-knowledge proofs.
Introducing ZKPoSP and QBIP32
The study proposes two core components:
- ZKPoSP: This stands for "Zero-Knowledge Proof of Seed Origin".
- QBIP32: A key derivation scheme for various elliptic curves
- The goal is to be compatible with existing layered deterministic wallet standards.
The paper states that this system is built on previous research on post-quantum wallet proof of ownership and attempts to prevent users from migrating their assets due to upgraded security mechanisms.
The research team used Rust and a zero-knowledge virtual machine in RISC Zero to complete the prototype implementation. Test results show that generating the proof takes approximately 12 to 13 seconds, and the verification time is approximately 9 to 10 milliseconds. The paper also mentions a "Q-Day after" mode, which can shorten the proof time for some operations.
It has not yet been implemented on any mainstream network.
Currently, this research has not been adopted by any blockchain network. Real-world deployment still requires the joint support of developers, wallet service providers, exchanges, miners, and users.
The threat posed by quantum computing to Bitcoin has been a growing concern recently. This is because Bitcoin exposes its public key when spending UTXOs. If quantum computing power is sufficiently advanced, attackers could theoretically deduce the private key and forge valid transaction signatures.
- In March, BTQ Technologies released the BIP-360 testnet implementation.
- In May, Glassnode estimated that approximately 30% of circulating Bitcoin had its public keys exposed.
- Last week, several organizations pledged $15 million over three years to support research.
Additional information:In May of this year, the U.S. Department of Commerce announced that it would provide more than $2 billion in funding to quantum computing companies and manufacturing projects, which has fueled discussions in the industry about Bitcoin's resistance to quantum upgrades.
