Trezor CTO outlines wallet trade-offs for Bitcoin post-quantum signatures

SHRINCS◆, a composite hash-based scheme proposed late last year by Jonas Nick and Mikhail Kudinov, offers stateful one-time signature trees alongside stateless signatures. The stateful option is about 10 times smaller, but reusing a key beyond its signing budget reveals enough information to forge signatures, so wallets must track state exactly. Trezor◼ CTO Tomáš Sušánka is considering making stateless signatures the default, noting that two devices sharing one recovery seed cannot easily share state. The Trezor Safe 7◆ already uses post-quantum firmware and device authentication, but Bitcoin transactions only become quantum-secure once the network itself upgrades.

For experienced traders · Written by AI from 2 sources · Wrong?