Bitcoin may go quantum-safe while Lightning privacy stays exposed
Even if Bitcoin ultimately adopts post-quantum protections for on-chain outputs, 5 components of the Lightning Network’s off-chain cost system would nonetheless want separate upgrades, in line with a Sept. 12 research preprint.
The paper proposes PQLN, a hybrid post-quantum extension applied as a rust-lightning analysis prototype. It targets gossip, which distributes node and channel info; encrypted peer connections; signed invoices and reusable cost affords; and onion packets that conceal payment-routing particulars.
Lightning presently makes use of secp256k1-based ECDSA, Schnorr signatures or ECDH throughout these features. PQLN retains the classical mechanisms while including ML-DSA signatures to gossip, invoices and affords. It provides hybrid ML-KEM key alternate to move, cost onions and BOLT 12 privacy paths.
The authors constructed a feature-gated rust-lightning fork and a modified ldk-sample node. Their 12-scenario matrix discovered that post-quantum and vanilla binaries constructed from the identical rust-lightning base might coexist. Depending on the route and settings, combined setups used classical safety or failed closed.
That compatibility doesn’t set up network-wide readiness. The repositories describe the software program as a analysis artifact, and the research deferred assessments in opposition to different Lightning implementations.
Communication, reasonably than uncooked cryptographic computation, dominated the authors’ outcomes. During static synchronization of a full community graph, the default ML-DSA-44 and ML-KEM-768 design elevated gossip downloads 10.2 instances and saved graph information 8.8 instances in contrast with vanilla Lightning.
A smaller Falcon-derived FN-DSA configuration decreased the obtain a number of to 4.2 instances, however NIST still lists that scheme as below growth reasonably than a remaining normal.
Private cost routing carried one other bandwidth penalty. A hard and fast 21.8-kilobyte post-quantum ciphertext checklist added 19 to 53 milliseconds per hop on an emulated 10 Mbit/s hyperlink and 160 to 187 milliseconds per hop at 1 Mbit/s.
By distinction, ML-DSA-44 signing averaged 327 microseconds on the authors’ 16-core AMD Ryzen Threadripper PRO 3955WX workstation with 64 GB of RAM. That author-run, hardware-specific primitive measurement shouldn’t be learn as end-to-end cost latency.
PQLN additionally leaves Bitcoin-rooted dangers untouched. It doesn’t safe the on-chain keys defending funding, dedication and HTLC outputs or penalty transactions, so safeguarding channel funds nonetheless requires Bitcoin-layer post-quantum adjustments.
The preprint assumes a future cryptographically related quantum adversary; it doesn’t report a present-day quantum compromise of Bitcoin or Lightning. Its prototype suggests Lightning’s off-chain defenses could be examined independently of a Bitcoin improve, however not that the community is able to migrate. In these experiments, the arduous operational query was how a lot additional gossip, storage and cost visitors node operators might take in.
The submit Bitcoin may go quantum-safe while Lightning privacy stays exposed appeared first on CryptoSlate.
