Moody mentioned that they’ll keep analyzing two more sets of algorithms, but any future PQC standards will just serve as backups to the three NIST rolled out today.
"No need to hold off for more standards," he stated. "You can start using these three right away. We gotta be ready for any attacks that might take down the algorithms in these standards, and we’ll keep working on backup solutions to secure our data. But honestly, for most uses, these new standards are what we should focus on."
Time for bitcoin devs to step up and upgrade bitcoin's digital signatures and stuff...
That's going to be quite difficult to do because ECDSA signatures are stuck inside a specific part of the transaction (scriptsig field for legacy transactions and the witness for segwit transactions), so you would actually need to upgrade the witness version if you want to use a different form of signature, which requires a new address type and a soft-fork.
The new address part should be trivial but old clients would have to treat the new form of signatures as instantly valid somehow.
I don't know much about cryptography, but there are few other steps they should do first such as,
1. Choose which one could be used by Bitcoin. Abstract of FIP 203 doesn't mention anything about cryptography signature, so i guess the choice is either FIP 204 or 205.
2. Do through verification about security of each cryptography. Don't forget some older cryptography accepted by NIST may have backdoor, https://en.wikipedia.org/wiki/Dual_EC_DRBG.
Good thing Bech32m exist, so theoretically bc1z or Bech32m with witness version 2 can be used. As for old client, "anyone can spend" trick could be used again.
I think it has more to do with than just the signature though. Bitcoin is built on Elliptic Curve Cryptography. So it's entire foundation is going to need to be rebuilt. FIPS-204 can help with that too I imagine. But the question is, is the bitcoin community going to get off their ass and do something about it. Or wait until the threat is materialized.
The migration will not be that easy, because as other users already mentioned,the encryption is like the soul of the coin, and change that will make bitcoin a different coin. I can predict a fork for the migration, but the original blockchain will stay alive until the point where quantum computing can vulnerable the blockchain encryption.
It will be a complex change and i can't see it happening soon, but it will happen at some point. Maybe in the next 50 years... or something like that.
so a fork like bitcoin cash. people have a copy of their old coins on the old network and their new ones on the new network. i guess that's what we would be looking at.
i would hope a fork could happen sooner than that. it might take a few tries to get it "right"...