1/ Regarding Bitcoin and the quantum threat: if terms like Classical Computer, CRQC, ECDSA, secp256k1, Shor’s algorithm, or the DLP leave you confused, you’re not alone. These form the mathematical foundation that currently secures Bitcoin. Here’s a clear breakdown.
2/ It starts with secp256k1, the specific elliptic curve Bitcoin was built on. Satoshi chose this curve because its math is relatively clean and efficient. The curve follows the simple equation y squared equals x cubed plus 7 over a huge prime field. This creates a mathematical structure where certain operations are easy in one direction but extremely difficult to reverse.
3/ Sitting on this curve is ECDSA, or Elliptic Curve Digital Signature Algorithm, Bitcoin’s original signature scheme. Your private key, a secret number created by the user, is used to generate a signature for transactions. The corresponding public key, derived from the private key through repeated point addition on the curve, allows anyone to verify that the signature is valid. This is classic asymmetric cryptography. Verification is easy, but forging a signature without the private key is infeasible on classical computers.
4/ All of this security ultimately comes from the Elliptic Curve Discrete Logarithm Problem. Given only a public key, which is a point on the secp256k1 curve, there is no known efficient way on classical computers to figure out the private key that created it. This one-way mathematical difficulty is what protects Bitcoin wallets. A simple way to understand this kind of problem is to think about multiplication. It is very easy to multiply two large numbers together. For example, multiplying 23 by 47 gives you 1081 almost instantly. However, if I only give you the number 1081 and ask you to find the original two numbers that were multiplied to get it, the task becomes much harder. You would have to try dividing 1081 by many different numbers until you find the correct pair. On elliptic curves, the equivalent operation is even more difficult to reverse.
5/ Classical computers are the ones we use every day, phones, laptops, servers, and so on. They are deterministic, meaning the same input always produces the same output. All current cryptography, including Bitcoin’s, was designed with these machines in mind.
6/ A CRQC, or Cryptographically Relevant Quantum Computer, is very different. This is a large scale, fault tolerant quantum computer capable of running algorithms like Shor’s at the scale needed to break current public key cryptography. These machines require extreme conditions, often near absolute zero for superconducting qubits, and are not believed to exist (yet) at the required scale as of 2026.
7/ Shor’s algorithm, developed by Peter Shor in 1994, is the key threat. It can efficiently solve both integer factorization and the discrete logarithm problem on a CRQC. This means a CRQC could derive private keys from public keys on secp256k1, breaking both ECDSA and the Schnorr signatures used in Taproot.
8/ An important nuance most people miss is this. In Bitcoin, public keys are often hidden behind a hash in addresses such as P2WPKH for modern transactions. They only become visible on chain when you spend from that address. This gives some protection depending on the transaction output chosen, but once a UTXO is spent and the public key is revealed, it becomes vulnerable to a future CRQC until the next block. During that time, a CRQC could perform a just in time attack, but creating a new transaction that overwrites the old one. Miners would choose this transaction over a user transaction, because a CRQC would add an increased fee, making the transaction more attractive for miners. From a cryptographic perspective, there is no way to tell the difference between a user transaction and a CRQC. The data and cryptography on-chain look exactly the same.
9/ Here are some quick facts. Asymmetric cryptography in general was conceived in the 1970s with the work of Diffie and Hellman. Elliptic curve cryptography itself was proposed later in 1985 by Koblitz and Miller. No CRQC is known to exist today. Breaking secp256k1 is estimated to require roughly 1200 to 2600 logical qubits (they include error correction), which is considered beyond the capabilities of current quantum hardware.
#Bitcoin