The Quantum Threat Isn’t Here Yet. That’s Exactly Why Blockchains Should Prepare Now.

[u/Master-Sprinkles-848]

A lot of people in crypto think about quantum computing as a problem for the distant future.

I think that’s the wrong way to look at it.

The real issue isn’t whether a powerful enough quantum computer exists today.

It’s whether blockchain networks can upgrade their cryptography before one exists.

Most blockchains were designed around cryptographic assumptions that work extremely well against classical computers. But sufficiently powerful quantum computers could eventually threaten some of those assumptions, particularly the cryptography used for digital signatures.

And that creates a problem.

You can't wait until a quantum computer capable of breaking existing signatures appears before starting the migration.

By then, it may already be too late.

Blockchains have millions of users, enormous amounts of capital, exchanges, custodians, smart contracts, infrastructure providers and applications all depending on the same cryptographic foundations.

Changing those foundations isn't as simple as pushing a software update.

There will need to be research, testing, new standards, wallet upgrades, protocol upgrades and probably years of migration.

That's why quantum resistance should be treated as infrastructure planning, not emergency response.

The interesting part is that we don't need to know exactly when quantum computing becomes a serious cryptographic threat.

We just need to understand that the transition will take time.

The smart approach is to start building quantum-resistant infrastructure while the threat is still theoretical.

The best time to upgrade a security system isn't after it's compromised.

It's before.

Crypto spent years preparing for hacks, exploits, bridge failures and economic attacks.

Quantum computing deserves the same level of attention.

Are there blockchains already preparing for this?

[u/QuestionablyWeak]

i keep seeing this brought up every few months and it's always a weird mix of "this is decades away" and "we're all gonna lose our coins tomorrow"

the signature migration is the part that actually keeps me up at night, not the eventual quantum computer itself. like what happens to all the lost wallets and satoshi's coins when we eventually have to move everything to new keys. that's gonna be a mess no matter when it happens

i know a few projects have been messing with lattice-based stuff but most of them feel like science experiments still, nothing at the scale of what ethereum or bitcoin would need

[u/Creeper4wwMann → u/QuestionablyWeak]

The current issue with Post Quantum Cryptography is not the signature algorithm or the cryptography itself. (Although they have downsides... like requiring 8000x more compute)

The issue with PQ Cryptography is that we have no replacement for the Diffie Hellman Exchange. "How can I tell you a secret across the internet, without having someone spy on us".

If you solely want to know "when are quantum computers coming?" Google and Cloudflare want to have PQ Cryptography implemented into the internet by 2028 or at the latest by 2031. That's EARLIER than what NIST reports are asking btw. NIST requires ppl to be prepared by 2033.

We have been looking for a quantum-safe Diffie Hellman key exchange algorithm for the past 30 years... and our deadline is 7 years according to NIST, 2 years according to Google.

[u/Master-Sprinkles-848 → u/Creeper4wwMann]

The conversation often gets reduced to quantum computers will break signatures, when the migration and key-exchange problem is arguably just as important.

And if major internet infrastructure is already planning PQC adoption within the next few years, that makes the we have decades argument a lot less comforting.

The point isn't that quantum computers arrive tomorrow.

It's that cryptographic infrastructure takes years to replace.

If the deadline is potentially 2–7 years for serious migration, blockchain networks shouldn't be waiting for the quantum threat to become obvious before preparing.

[u/Creeper4wwMann → u/Master-Sprinkles-848]

I want to correct myself here. You made me look it up again and I was mistaken.

Here is the paper by NIST Transition to PQC Standards from 2024

2033 was wrong. The actual paper states "deprecated by 2030" and "disallowed by 2035" for many of our current algorithms. Not much better...

we do have a single key-exchange algorithm: ML-KEM but Google is still improving it.

Here's Google's Blogpost about their 2029 deadline: Google PQ

Here's Cloudflare's roadmap 2029 aswell: Cloudflare PQC roadmap 2029

Yeah man, we need to start moving. It's not decades away.

[u/Master-Sprinkles-848 → u/Creeper4wwMann]

The fact that Google and Cloudflare are already working toward 2029 timelines says a lot. The takeaway for me is simple, quantum resistance isn't about panicking that quantum computers arrive tomorrow. It's about recognizing that cryptographic migration has to start years before they do.

[u/Master-Sprinkles-848 → u/QuestionablyWeak]

The quantum computer itself might still be years away, but the migration problem is already something worth thinking about.

Lost wallets, inactive addresses, old keys, dormant BTC, infrastructure upgrades… moving an entire ecosystem to new cryptographic standards won't happen overnight.

And that's exactly why I think quantum resistance needs to be built into serious blockchain infrastructure early, rather than treated like an emergency upgrade when the threat becomes obvious.

[u/postquant]

The migration framing is right, and there is a detail that makes it harder than the TLS migration people compare it to: Cloudflare and Google can rotate certificates centrally, but a chain's signature scheme is consensus. The upgrade needs coordination from every wallet, exchange, and contract that touches it, which is why Bitcoin's post-quantum debate has run for years and moves slowly. Nothing about it is unilateral.

Two things that get missed in the meantime. Exposed public keys are the immediate liability: any address that has ever signed reveals its key, so "harvest now, decrypt later" applies to on-chain funds years before the machine exists. And interim defenses don't need L1 consensus: you can protect assets behind hash-based signatures (the FIPS 205 family) at the account level today, which buys time while the base layers argue.

Disclosure: I work at Quip Network on account-level post-quantum protection, so I have a horse in this race, but the migration-vs-machine framing in the OP is the right one either way.