I knows quantum computer breaks elliptic curve math but what about ring signature? thanks

1 Answer 1


"Normal" ring signatures aren't broken (meaning the true signer is revealed) by QC, but their security certainly is (unforgeability). However, the traceable version Monero uses (for double-spending prevention) is indeed able to be broken (meaning public key linked to key image and thus signer revealed) due to the existence of a key image.

  • is there any good alternative for ring signatures to be 'safe' against a QC? thanks a lot
    – samwellj
    Commented Dec 10, 2016 at 4:08
  • This should maybe be its own question, but is an area of active research--not that active on Monero's part at the moment, but rather QC-resistant/proof public key algoes, which "should" work to replace ECC for ring signatures. Here is one: microsoft.com/en-us/research/project/sidh-library
    – Luigi
    Commented Dec 12, 2016 at 15:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.