From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Sat, 11 Apr 2026 10:14:50 -0700 Received: from mail-oa1-f63.google.com ([209.85.160.63]) by mail.fairlystable.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1wBbuz-0005sL-N1 for bitcoindev@gnusha.org; Sat, 11 Apr 2026 10:14:50 -0700 Received: by mail-oa1-f63.google.com with SMTP id 586e51a60fabf-42394108a90sf5184662fac.0 for ; Sat, 11 Apr 2026 10:14:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1775927683; x=1776532483; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-sender:mime-version :subject:references:in-reply-to:message-id:to:from:date:sender:from :to:cc:subject:date:message-id:reply-to; bh=L2HMDPmJ6xnCVSUg+hinAZuoOb/EISRhyVg+NdHK/x8=; b=DStfhYg30mM3ob5n1KTSrAtsGBrlzHPSglUhlAVzlDHED1f6NQ2vvqsy6ExhPaKlJv /7RSssmRM31JOoBDucCxYQFiJ/QXox51rn4rMeXRe75B3ulSU7micPiDLBPXXKvdjNAK +PxO+/mFxnACq2Kum0i2MEYEebQAKqqc3YGG5ugEBa6wHz0lvwFg+jz13uBGWzQ2/Lrc QS7F+d46+tXXV4KtIdOlRD/lm9vQCmsii51ryyFetLm4eYVOPvgzR7eoRqMDaJ1hhxdg TSQ8zc7iOoIiYqGP/2UFvr8hwKhOyMB+FWfFCpaTKMjnwPX0KhC5aQhZQg7AsFwYxESZ FqmA== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1775927683; x=1776532483; darn=gnusha.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-sender:mime-version :subject:references:in-reply-to:message-id:to:from:date:from:to:cc :subject:date:message-id:reply-to; bh=L2HMDPmJ6xnCVSUg+hinAZuoOb/EISRhyVg+NdHK/x8=; b=e3rkgsrjXAtRC+R8TNol7FgECqv+kv2zDqDt6U3UhV+OxSTFUqQ0wJwjOugi1riBub lFsYDvVfr0pAz+CIDM97xTRBh7EtMrIWQrWrbZ5HT0VWXyygsRhU2l8jxETanccQuq92 syPAqZR8c3mmeg5uFtkwyFvT6DbPbt8/xap+o7t6q6/PGAS83IsV7Tb3IHzTJH8SxrTs JkBRYfXp84JpZjBRqnyhyZ2zFt5PDsCS8IJxryQVwRuyyt8guOBYumUlJJZjNwcQM/Nj GCQYv1n6FbcIx2azPkU+fBqr3fDKlSVIH9+7N7rOWN+Q1P1YHuJ5JcuqYYwHG4Yjd5Xp ITxQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1775927683; x=1776532483; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:x-original-sender:mime-version :subject:references:in-reply-to:message-id:to:from:date:x-beenthere :x-gm-message-state:sender:from:to:cc:subject:date:message-id :reply-to; bh=L2HMDPmJ6xnCVSUg+hinAZuoOb/EISRhyVg+NdHK/x8=; b=fEAoHKIX7U0M1k93u+Bl3lT22HLGTgJF9mxRkj+wlnn7H8k166x35IrtsDf5v5da0B HE9RTT47lAJWrVicjTSd5pLtbC4YdjWma2c6kUtb99w4a7HIhllibvkpU+PvTDFk1HXE OLuEYY1j8t84MX97JwveAiwylamEndzVSBf61omRpYvQHPSMEzMCTd93WgKIaoUyDvo5 pT7lLNc1y9VAAJcZt4/XoU/I9Su8k9Xq6J4tYhKF+zqvqz3sw/ETIljph+MjCkhJg+WZ OKbZezEDuwIKz4idEtwNRV6L13Lhb5hJNbDlD6CrWy5VeAwMNj31H3ay+rbGorH8U+Fa QZcQ== Sender: bitcoindev@googlegroups.com X-Forwarded-Encrypted: i=1; AJvYcCWP3VJ+7RFEAK+OoIl4mOJhWuEYp8AkAI9ItPJaNL74a/cMKUg2Y0AGnsaEpH2F4fPc0m5BsZohwpht@gnusha.org X-Gm-Message-State: AOJu0YzNTReQeP249c/pogNxlgWE7LAeloEsxGFLxiYI2aJOiH+mQTA7 Nw069GgyAxx0nfFEgac7DdxHJPeHtDE9XPWN86O2F9N/tnYMrUaz5toJ X-Received: by 2002:a05:6871:331c:b0:424:19d6:d1f with SMTP id 586e51a60fabf-42419d65923mr53857fac.17.1775927683447; Sat, 11 Apr 2026 10:14:43 -0700 (PDT) X-BeenThere: bitcoindev@googlegroups.com; h="AYAyTiJYzJEiIPVLFvPw7PZyX+0DOm4Nc1CcQYauy1Ek5u+DpQ==" Received: by 2002:a05:6871:3591:b0:422:c0f1:a9fa with SMTP id 586e51a60fabf-423dd00a17als1027661fac.0.-pod-prod-07-us; Sat, 11 Apr 2026 10:14:38 -0700 (PDT) X-Received: by 2002:a05:6808:16a3:b0:464:305e:8fcc with SMTP id 5614622812f47-4789f10b760mr3669877b6e.20.1775927677940; Sat, 11 Apr 2026 10:14:37 -0700 (PDT) Received: by 2002:a05:690c:4c01:b0:79a:e1a5:fe7e with SMTP id 00721157ae682-7ae240f9947ms7b3; Sat, 11 Apr 2026 10:09:30 -0700 (PDT) X-Received: by 2002:a05:690c:660e:b0:7b1:a690:202b with SMTP id 00721157ae682-7b1a6902512mr13729287b3.29.1775927370289; Sat, 11 Apr 2026 10:09:30 -0700 (PDT) Date: Sat, 11 Apr 2026 10:09:29 -0700 (PDT) From: Daniel Buchner To: Bitcoin Development Mailing List Message-Id: In-Reply-To: <4303fca1-81a8-4655-ac53-33f566daebc2n@googlegroups.com> References: <4303fca1-81a8-4655-ac53-33f566daebc2n@googlegroups.com> Subject: [bitcoindev] Re: A slight change proposed on Committing to quantum resistance: a slow defence for Bitcoin against a fast quantum computing attack MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_Part_105422_158686284.1775927369887" X-Original-Sender: danieljb2@gmail.com Precedence: list Mailing-list: list bitcoindev@googlegroups.com; contact bitcoindev+owners@googlegroups.com List-ID: X-Google-Group-Id: 786775582512 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Score: -0.5 (/) ------=_Part_105422_158686284.1775927369887 Content-Type: multipart/alternative; boundary="----=_Part_105423_914618245.1775927369887" ------=_Part_105423_914618245.1775927369887 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This is basically the same concept as this proposal that describes a=20 mechanism to do so (which I started a thread about=20 yesterday): https://github.com/csuwildcat/pqc-precommitment-migration. Only= =20 difference is that you'd just activate the precommitted PQC key/validation= =20 pathways instead of having to explicitly freeze ECC (though I suppose you= =20 could do both). On Monday, April 6, 2026 at 3:32:30=E2=80=AFPM UTC-5 PYM wrote: > Hello, here's a small idea to combine merkel tree with timestamped messag= e=20 > signature to bind p2pkh adress to quantum resistant scheme so user do not= =20 > need to rush to move bitcoin before qday, in a space efficient form. > > > - *Universal P2PKH freeze* =E2=80=94 At a defined block height, all P2= PKH=20 > outputs become unspendable via classical ECDSA.=20 > - *Pre-freeze claim* =E2=80=94 Before the freeze, owners sign a claim= =20 > containing their Bitcoin address and a new post-quantum public key of = their=20 > choice. The claim is ECDSA-signed, proving classical ownership while= =20 > quantum computers don't yet exist.=20 > - *Merkle-batched publication* =E2=80=94 Claims are batched into Merkl= e trees.=20 > Only the 32-byte root goes on-chain via OP_RETURN. One transaction cov= ers=20 > large amount of claims.=20 > - *Post-freeze spending* =E2=80=94 To spend a frozen output, provide: = the=20 > original claim, a Merkle inclusion proof linking it to a pre-freeze ro= ot,=20 > and a signature from the post-quantum key committed in the claim. =20 > - *No claim, no spend* =E2=80=94 Any P2PKH output with no registered c= laim=20 > before the freeze height is permanently frozen until a future recovery= =20 > mechanism is defined by the community. > > > I do not have enough knowledge to find the ideal scheme or implementation= =20 > that fulfill those requirements sadly.=20 > > 1 - Stewart I, Ilie D, Zamyatin A, Werner S, Torshizi MF, Knottenbelt WJ.= =20 > Committing to quantum resistance: a slow defence for Bitcoin against a fa= st=20 > quantum computing attack. R Soc Open Sci. 2018 Jun 20;5(6):180410. doi:= =20 > 10.1098/rsos.180410. PMID: 30110420; PMCID: PMC6030263. > https://pmc.ncbi.nlm.nih.gov/articles/PMC6030263/ --=20 You received this message because you are subscribed to the Google Groups "= Bitcoin Development Mailing List" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoindev+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/bitcoindev/= adeaa540-eaf0-4a1c-ad67-57ae50a58671n%40googlegroups.com. ------=_Part_105423_914618245.1775927369887 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable This is basically the same concept as this proposal that describes a mechan= ism to do so (which I started a thread about yesterday):=C2=A0https://githu= b.com/csuwildcat/pqc-precommitment-migration. Only difference is that you'd= just activate the precommitted PQC key/validation pathways instead of havi= ng to explicitly freeze ECC (though I suppose you could do both).

On Mond= ay, April 6, 2026 at 3:32:30=E2=80=AFPM UTC-5 PYM wrote:
Hello, here's a small idea to = combine merkel tree with timestamped message signature to bind p2pkh adress= to quantum resistant scheme so user do not need to rush to move bitcoin be= fore qday, in a space efficient form.

  • Universal P2PKH freeze =E2=80=94 At a defined= block height, all P2PKH outputs become unspendable via classical ECDSA.
  • Pre-freeze claim =E2=80=94 Before= the freeze, owners sign a claim containing their Bitcoin address and a new= post-quantum public key of their choice. The claim is ECDSA-signed, provin= g classical ownership while quantum computers don't yet exist.
  • Merkle-batched publication =E2=80= =94 Claims are batched into Merkle trees. Only the 32-byte root goes on-cha= in via OP_RETURN. One transaction covers large amount of claims.
  • Post-freeze spending =E2=80=94 To= spend a frozen output, provide: the original claim, a Merkle inclusion pro= of linking it to a pre-freeze root, and a signature from the post-quantum k= ey committed in the claim.=C2=A0
  • No claim, no spend =E2=80=94 Any = P2PKH output with no registered claim before the freeze height is permanent= ly frozen until a future recovery mechanism is defined by the community.

I do not have enough knowledge to find the ideal scheme or i= mplementation that fulfill those requirements sadly.=C2=A0

1 - Stewa= rt I, Ilie D, Zamyatin A, Werner S, Torshizi MF, Knottenbelt WJ. Committing= to quantum resistance: a slow defence for Bitcoin against a fast quantum c= omputing attack. R Soc Open Sci. 2018 Jun 20;5(6):180410. doi: 10.1098/rsos= .180410. PMID: 30110420; PMCID: PMC6030263.
https://pmc.nc= bi.nlm.nih.gov/articles/PMC6030263/

--
You received this message because you are subscribed to the Google Groups &= quot;Bitcoin Development Mailing List" group.
To unsubscribe from this group and stop receiving emails from it, send an e= mail to bitcoind= ev+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/bitcoind= ev/adeaa540-eaf0-4a1c-ad67-57ae50a58671n%40googlegroups.com.
------=_Part_105423_914618245.1775927369887-- ------=_Part_105422_158686284.1775927369887--