What Kind of Threat Does Quantum Computing Pose to Bitcoin?

Question

My understanding of quantum computing and what it can do is popular mechanics level at best. I have heard people dismiss bitcoin as inevitably insecure "because of quantum computing" and, conversely, I've heard people dismiss quantum computing as hype, the reality of which lies too far in the future to worry about.Is the concern simply, "we don't know how this could change the computing landscape," or is something more like "quantum computing promises to calculate primes in O(1) time, rendering keypairs worthless"?And how far out are we realistically?

alwillis · Accepted Answer

This means that as long as funds have never been transferred from a p2pkh address, the public key is not known and the private key cannot be derived using a quantum computer.Some address types are already quantum-resistant. Of course the addresses that are just public keys (not hashed public keys) are vulnerable.From https://www2.deloitte.com/nl/nl/pages/innovatie/artikelen/qu...

BelenusMordred · Answer

SHA2 hashing which secures the chain itself faces no known threats from quantum-computing.
ECDSA wallet signatures can easily be broken with a sufficiently sized QC and now are essentially a billion dollar bounty on whether a country or corp has gotten there.
Switching over to post-quantum signatures is a simple matter but the coins will have to be moved to secure them.
So, someone with access to such a computer can learn the private key for any wallet on the planet and steal the contents, but they can't magically mine with 100% hashpower or undo history and all prior tx's.

therealmarv · Answer

None, unless somebody (China?) surprises us a with a working one specifically on the bitcoin blockchain.Quantum resistance blockchain architecture is in the works or even available in theory and if the danger is real Bitcoin can be forked/modified to be quantum resistant. Because community would most probably be okay with this switch it would be accepted world wide.