Quantum Computing and Bitcoin: Separating Signal from Noise
Every few months, a familiar headline resurfaces: “Quantum computing could break Bitcoin.”
It spreads quickly because it sounds technical, authoritative, and just plausible enough to create doubt. For many, it raises a fundamental question: Has something changed that threatens Bitcoin at its core?
This concern is not new. Variations of it have existed since Bitcoin’s early days. Even Satoshi Nakamoto addressed the issue in 2010, noting that if a cryptographic primitive were ever compromised, the network could transition to stronger alternatives.
That does not make the concern irrelevant. But it does mean it is worth stepping back and separating long-term theoretical risk from present-day reality.
The Basis of the Concern
Bitcoin relies on well-established cryptographic systems to secure ownership of funds. At the centre of this is the Elliptic Curve Digital Signature Algorithm (ECDSA).
In simple terms, Bitcoin uses a pair of keys:
- A public key, which can be shared openly; and
- A private key, which must remain secret.
When a transaction is signed, the private key produces a signature that proves ownership without revealing the key itself. The security of this system depends on the practical impossibility of deriving a private key from its corresponding public key using classical computers.
Quantum computing introduces a different computational model. Instead of processing information sequentially, quantum systems can evaluate multiple possibilities simultaneously through phenomena such as superposition and entanglement.
This becomes relevant because of Shor’s algorithm, a quantum algorithm capable of solving certain mathematical problems—such as factoring large numbers or computing discrete logarithms—far more efficiently than classical methods. These are precisely the problems underpinning much of modern cryptography, including elliptic curve cryptography.
In theory, a sufficiently powerful quantum computer could derive a private key from a public key, thereby compromising the security model.
However, an important qualification is often overlooked:
This risk only becomes relevant once a public key is exposed.
In Bitcoin, not all addresses expose public keys in the same way:
- Older P2PK outputs and some modern structures expose the public key immediately.
- More common formats, such as P2PKH and native SegWit (P2WPKH), keep the public key hidden behind a hash until the moment funds are spent.
This distinction materially affects the practical attack surface.
What Has Recently Changed?
Recent attention has been driven by new academic work, including a paper published by researchers associated with Google. The paper suggests that breaking elliptic curve cryptography may require fewer logical qubits than previously estimated—potentially around 1,200.
At first glance, this appears significant.
However, it is essential to understand what this represents. The research is theoretical. It does not demonstrate a working attack, nor does it provide a fully implementable quantum circuit. Rather, it shows that, under certain assumptions, a more efficient approach may exist.
In other words, the paper refines the mathematical pathway, not the practical capability.
This distinction is critical. A clearer theoretical model does not mean the underlying engineering challenges have been solved.
A Reality Check on Quantum Capability
The gap between theory and practice remains substantial.
1. Error Correction
Quantum systems are highly unstable. To produce a single reliable “logical qubit”, thousands of imperfect “physical qubits” are typically required. This introduces massive overhead.
2. Coherence Time
Qubits lose their quantum state extremely quickly—often in fractions of a second. Running complex algorithms like Shor’s would require sustained stability far beyond what current systems can achieve.
3. Scale
Theoretical models assume:
- Large numbers of stable qubits
- Extremely low error rates
- Long execution times
Current hardware falls short by several orders of magnitude on each of these dimensions.
Taken together, these constraints mean that a practical quantum attack on Bitcoin remains speculative and likely distant, even if theoretical models improve.
Bitcoin Is Not Static
One of the more persistent misconceptions is that Bitcoin would remain unchanged in the face of such a threat.
In reality, Bitcoin is an evolving system. Its development process is deliberately conservative, but it is not static.
Work on post-quantum cryptography is already underway. This includes:
- Exploration of hash-based signature schemes
- Research into Merkle-based constructions
- Proposals aimed at reducing unnecessary exposure of public keys
These developments are not reactive panic measures. They form part of a long-term approach to ensuring that Bitcoin can adapt if required.
Importantly, Bitcoin upgrades occur through consensus rather than decree. This results in a slower process, but one that prioritises robustness and reliability. New cryptographic primitives are only adopted after extensive review and testing.
A Broader Perspective
It is also useful to consider that quantum computing is not a Bitcoin-specific issue.
Much of the global digital infrastructure—banking systems, government databases, secure communications—relies on cryptographic assumptions similar to those used in Bitcoin. In many cases, these systems are built on older standards that may be more vulnerable and significantly harder to upgrade.
Centralised systems often have the theoretical ability to mandate rapid change. In practice, however, legacy infrastructure, complexity, and coordination challenges frequently slow down implementation.
Bitcoin, by contrast, cannot compel upgrades. It relies on economic incentives and voluntary consensus. While this can appear inefficient, it also creates strong alignment among participants when changes are necessary.
The More Immediate Risk
Focusing exclusively on quantum computing can distract from more immediate and prevalent risks.
In practice, most Bitcoin losses today arise from:
- Poor backup procedures
- Compromised devices
- Insecure storage of seed phrases
- Phishing and social engineering
These are not edge cases; they are the dominant failure modes.
From a risk management perspective, this is significant. While quantum computing represents a potential future threat, current vulnerabilities are often far more direct and far more likely to result in loss.
Practical Security Considerations
For individuals and institutions holding Bitcoin, a sound security approach should prioritise:
- Minimising public key exposure where possible
- Avoiding address reuse
- Using modern address formats such as native SegWit
- Implementing robust backup and recovery procedures
- Considering more advanced structures, such as multi-signature arrangements, where appropriate
These measures provide meaningful protection today, while also aligning with the direction in which Bitcoin security is evolving.
A Legal and Structural Perspective
From a legal standpoint, particularly in jurisdictions such as South Africa, Bitcoin is generally treated as an asset or form of property. This has important implications for:
- Custody arrangements
- Estate planning and succession
- Fiduciary responsibilities of trustees and executors
As security models evolve—whether due to quantum considerations or otherwise—the complexity of managing digital assets is likely to increase rather than decrease.
This reinforces the importance of:
- Clear documentation
- Structured custody solutions
- Forward-looking planning
In many cases, the legal and practical challenges lie not in the technology itself, but in how it is implemented and managed.
Conclusion
Quantum computing presents a legitimate long-term consideration for cryptographic systems, including Bitcoin. However, the current narrative often conflates theoretical progress with practical capability.
At present:
- No quantum computer exists that can threaten Bitcoin’s cryptography in practice
- Significant engineering barriers remain unresolved
- Bitcoin’s development community is already exploring viable adaptation pathways
At the same time, the most immediate risks to Bitcoin holders are not quantum in nature. They arise from everyday security practices and operational weaknesses.
A balanced view is therefore essential. Quantum computing should be understood as part of the broader landscape of technological evolution—not as an imminent existential threat.
For now, prudent Bitcoin security remains grounded in fundamentals: sound key management, careful custody structures, and an awareness of how the system continues to develop.
Source: The Bitcoin Way