Bitcoin SHRIMPS - How Blockstream’s Latest Quantum Proposal Looks to Minimize Risks insider.btcpp.dev
Blockstream’s SHRIMPS proposes a post-quantum Bitcoin signature scheme with a compact fallback before SPHINCS+ gets huge.
2 comments
How does the compact fallback get chosen in practice, is it something you only use if you lose the state, or does every wallet end up carrying both paths around?
> only use if you lose the state
not quite, if both paths live in the wallet, the fallback is always attack surface.