3 ms·
Merkle-Damgard hash functions (such as SHA256) are merely weakened by QC. SHA256 is considered good enough and as such, BTC mining should be able to weather QC.
by zamalek 9y ago
Merkle-Damgard hash functions (such as SHA256) are merely weakened by QC. SHA256 is considered good enough and as such, BTC mining should be able to weather QC. There is a variant of Shor's Algorithm that can solve ECDSA, so you might have problems with your BTC wallet; a fork using a new resistant asymmetric algorithm would be needed.
Memory-constrained algorithms, such as scrypt, should be quantum resistant based on what I know (which isn't much). If I'm not horribly misinformed, LTC mining should therefore be resistant. Again, LTC wallets would face problems.
- rocqua 9y agoDoes the same hold for hashes based non on Merkle-Damgard but the sponge construction?
- zamalek 9y agoIt looks like we don't know, excluding some very specific sponge functions, based on some quick research.[1][2] [1]: https://eprint.iacr.org/2017/771.pdf https://eprint.iacr.org/2017/771.pdf [2]: https://crypto.stackexchange.com/questions/419/what-security-do-cryptographic-sponges-offer-against-generic-quantum-attacks/46705 https://crypto.stackexchange.com/questions/419/what-security... (NB: comments)