Post
Topic
Board Development & Technical Discussion
Re: Brute-forcing Bitcoin private keys
by
o_e_l_e_o
on 20/11/2021, 14:52:30 UTC
Yeah, not only that but they're really not worth changing over to since they still pin their entire security on a hash function which is no different than bitcoin right now.
The hash function is not the function which is at risk from quantum computers - it is the ECDLP.

They say you only use a private key/public key pair in Lamport once but we all know how that turned out in bitcoin. people reuse their addresses they do it all the time.
Lamport signatures are different, in that you must reveal part of your private key as your signature of any message. They should only ever be used once in their native form, as every additional time you use them makes it easier and easier for an attacker to forge a signature.