new round of the quantum-computing-vulnerability objection: CHECK
As far as I understand, the QC-hardness of Bitcoin is due to the extra hashing of the pubkey, with the hash part being hard to invert, even with QC algorithms.
Assuming you could
quickly break ECC, really powerful quantum computing could theoretically allow for a 'quantum replacement attack' - you could try to quickly reinject another, signed transaction (with the key you then know) while the real one is sitting in the mempool, waiting to be mined.
However, I also do not, at all, believe the hype that QC is just around the corner, and even less believe it will be viable for breaking crypto any time soon that is worth less than a couple millions of today's dollar value.
Still, and to simply stop the whole 'what if QC happens' scaremongering tactics, I wonder whether it might be a good idea to work on a new signature scheme that would support straight-forward SHA256-based Lamport signatures in Bitcoin.
Would also reduce the number of crypto primitives that need to be used in Bitcoin to pretty much just SHA256.
Is it just me, or does this seem to be quite doable, except for the quite substantial bloat in network traffic and chain size?
Implementing it would allow for a pragmatic and hybrid approach where people store larger sums on QC-safe addresses and use ECC crypto for the bulk of the daily, small scale transaction volume.
Given the steep distribution of amounts in Bitcoin addresses, the total amount of Lamport-signed BCHs and UTXOs would be quite small. It would stay small until the moment QC would become so powerful (if it ever happens - those 50 qubits from IBM are supposedly stable for like 20usec or so) and ubiquitous that one would need to protect smaller and smaller amounts with QC-hard crypto. But those can likely still be quite large, due to the expected hardness of inverting RIPEMD160 and the bad guys having to resort to 'quantum replacement' approaches for a viable attack.
But by then, I'd expect the field of QC-safe crypto to have advanced sufficiently for better schemes to be available.