Babbush et al. analyze quantum threats to blockchains in their paper, providing resource estimates for breaking secp256k1 and validating results with ZK proof, while discussing mitigations and the urgency of migrating to Post-Quantum Cryptography. Babbush等人在论文中分析了量子计算机对区块链的威胁,提供了secp256k1曲线破解的资源估计,并利用ZK证明验证结果,同时探讨了缓解策略和迁移到后量子密码学的紧迫性。
Notes
Quantum computers can break secp256k1 using Shor's algorithm with ≤1200 logical qubits and ≤90M Toffoli gates.
On superconducting architectures, circuits can execute in minutes with <500k physical qubits.
Distinguish fast-clock vs. slow-clock architectures; fast-clock CRQCs may enable on-spend attacks.
Analyze systemic risks in blockchain features like smart contracts, PoS, and Data Availability Sampling.
Propose digital salvage frameworks to regulate dormant assets and prevent adversarial seizure.
Urge vulnerable cryptocurrency communities to migrate to Post-Quantum Cryptography immediately.
Why are blockchains more exposed to quantum attacks than ordinary systems? 为什么区块链比普通系统更容易受到量子攻击?
Because blockchain transactions and public keys are usually public, attackers can store the data and wait until quantum computers mature, especially targeting wallets and historical assets whose public keys are already exposed. 因为链上交易和公钥通常是公开的,攻击者可以长期保存数据,等待量子计算机成熟后进行攻击,尤其是已经暴露公钥的钱包和历史资产。
What is an on-spend attack and why is it dangerous? 什么是 on-spend attack?为什么它很危险?
An on-spend attack means that after a user broadcasts a transaction but before confirmation, an attacker uses quantum computation to recover the private key and front-run the spend. This is especially dangerous for public mempool chains. on-spend attack 指用户广播交易后、区块确认前,攻击者在 mempool 时间窗口内利用量子计算恢复私钥并抢先花费资产。对于公开 mempool 的链,这种风险尤其高。
Why are the resource estimates in this paper so important? 为什么这篇论文的资源估计如此重要?
It concretizes the cost of breaking 256-bit ECDLP into roughly 1200 to 1450 logical qubits and tens of millions of Toffoli gates, sharply reducing uncertainty from prior estimates and directly impacting PQ migration timelines. 它将破解 256 位 ECDLP 的成本具体化为约 1200 至 1450 个逻辑 qubits 和数千万 Toffoli gates,显著降低了过去估计的不确定性,并直接影响区块链 PQ 迁移时间表。