34 votes
Accepted

How vulnerable is Monero to Quantum Computing?

From Monero developer Smooth: “Yes it would be more vulnerable (with regard to public keys) but the protection it affords if uncertain and fragile. If QC can crack keys "slowly" then you can ...
Smart Kid's user avatar
  • 6,563
5 votes
Accepted

Is there a formal plan in place for the transition to Quantum Computing? If so, what is it?

The obvious answer: when we have proof that "QC-resistant" algorithms are actually resistant, we can adopt a new algorithm and roll it out in the next scheduled hard fork. At present, everything ...
hyc's user avatar
  • 4,233
5 votes
Accepted

Will quantum computer break ring signatures?

"Normal" ring signatures aren't broken (meaning the true signer is revealed) by QC, but their security certainly is (unforgeability). However, the traceable version Monero uses (for double-spending ...
Luigi's user avatar
  • 2,462
4 votes

What alternative cryptography could be used in the future to protect Monero against quantum computers?

Hash functions are not (as) vulnerable to attacks made possible by the existence of quantum computers, as the quickest way to break a hash function is via Grover's algorithm, which provides "only" a ...
bekah's user avatar
  • 455
4 votes

How would the privacy of monero be affected by a quantum computer?

Yep, using Shor's algorithm for finding the discrete log would allow the person in possession of a quantum computer to find every x used in a key image x.H(R) (not immediately, but in a feasible ...
bekah's user avatar
  • 455
4 votes
Accepted

Do stealth address only work with elliptic curve cryptography ?

Monero's stealth addressing works like this: You start with a destination wallet address, which is a pair of public keys A, B which have corresponding private keys a, b known only to the recipient. A ...
knaccc's user avatar
  • 8,468
2 votes
Accepted

Can someone suggest a better way to test transfers for development testing?

You need to run a private testnet. Instructions can be found here: https://github.com/moneroexamples/private-testnet Without it being private, your mined blocks wont make it onto the real testnet ...
jtgrassie's user avatar
  • 19.1k
2 votes

Do stealth address only work with elliptic curve cryptography ?

Stealth addresses can be supported by any public private key cryptography that supports a Diffie-Hellman (DH) Key Exchange. DH Key Exchanges are not unique to elliptic curve cryptography. The first ...
skaht's user avatar
  • 1,576
1 vote

Quantum-safe stealth addressing

but I'm curious if there has been any serious research done on post-quantum stealth addressing systems There has been specific research undertaken with regards to Monero in a post-quantum setting (...
jtgrassie's user avatar
  • 19.1k

Only top scored, non community-wiki answers of a minimum length are eligible