Post-Quantum Cryptography For Bitcoin | DAN BONEH

One of the most prolific and influential cryptographers in the world, it’s difficult to fully quantify the impact that Dan Boneh has had on Bitcoin and digital assets more broadly.

Through both his own research and his mentorship of some of the space’s most important contributors — e.g. Andrew Poelstra, Benedikt Bunz and Robin Linus — few people have done more to shape the cryptographic foundations underlying modern blockchains and digital finance.

More recently, Dan co-authored Google’s widely discussed paper, “Securing Elliptic Curve Cryptocurrencies against Quantum Vulnerabilities,” which reduced prior estimates of the resources required to run Shor’s algorithm against the elliptic-curve cryptography used by Bitcoin.

The paper reignited debate around quantum computing timelines and the long-term security assumptions behind modern cryptocurrencies.

In this episode of Bitcoin Rails, Dan and I discuss the current state of quantum computing, its potential implications for Bitcoin, and how he believes the Bitcoin community should think about preparing for a post-quantum future over the coming decade and beyond.

And yes, Dan shares his take on the “when quantum” question in the interview, among other key perspectives.

This episode of Bitcoin Rails is brought to you by my NEW sponsors:

LayerTwo Labs — developing research, software, and technologies for scaling Bitcoin via the integration of Drivechains (BIP 300/301)

Hashi on Sui Network — a primitive for executing Bitcoin Defi transactions, without having to trust a federated bridge or other centralized entity

BitBox — an open-source Bitcoin-only hardware wallet, with smooth UX and no compromises on security. Check out Bitbox [dot] swiss and use code BITCOINRAILS to get a discount

TIMESTAMPS:
00:00 — Intro and Dan’s history with cryptography and Bitcoin
11:44 — Shor's algorithm: how a 1994 paper became cryptography's most important threat
16:39 — Building a quantum computer: superconducting qubits vs neutral atoms
25:37 — When should we start worrying about quantum computers? The timeline debate
31:51 — Have we already reached quantum computing's “ahá” moment?
39:09 — Inside the Google paper: how Shor's algorithm was optimized
49:57 — The Bitcoin mempool attack and the 10-minute window
59:21 — Mitigation: what should Bitcoin do to prepare for quantum?
1:11:54 — Hash-based vs lattice-based signatures: Dan's case for lattice
1:23:15 — ZK proofs, BIP361, and what to do with Satoshi's coins
1:31:52 — Encrypted mempools and MEV
1:38:29 — Why Bitcoin will survive quantum and Dan's message to Bitcoin builders