Damus
Open in Damus
waxwing · 3d
Interesting detail that I bet no one else mentions ;) If you're worried that AI might break the cryptography protecting your coins, it might make sense to switch to taproot. ECDSA is *far* less trust...
 Wonteet Zebugs profile picture
Wonteet Zebugs @WonteetZebugs
I don't understand this. Don't taproot outputs expose the public key on-chain immediately? (whereas legacy P2PKH/P2WPKH hides the public key behind a hash until spending).

It seems to me that taproot is worse against a hypothetical quantum attacker who can't break keys quickly (because public keys are exposed from the start).
1
waxwing · 2d
Yes. The quantum attack, any attack breaking ECDLP, it's worse. An ECDSA specific algorithmic attack, it's better. Example: with ECDSA you can create a signature that validates against two different pubkeys. With Schnorr you can't do that.