I knows quantum computer breaks elliptic curve math but what about ring signature? thanks


"Normal" ring signatures aren't broken (meaning the true signer is revealed) by QC, but their security certainly is (unforgeability). However, the traceable version Monero uses (for double-spending prevention) is indeed able to be broken (meaning public key linked to key image and thus signer revealed) due to the existence of a key image.

  • is there any good alternative for ring signatures to be 'safe' against a QC? thanks a lot
    – samwellj
    Dec 10 '16 at 4:08
  • This should maybe be its own question, but is an area of active research--not that active on Monero's part at the moment, but rather QC-resistant/proof public key algoes, which "should" work to replace ECC for ring signatures. Here is one: microsoft.com/en-us/research/project/sidh-library
    – Luigi
    Dec 12 '16 at 15:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.