Europol says crypto’s quantum upgrade could take years and urges work to start now

Introduction

Europol, the EU's law enforcement agency, is urging the cryptocurrency industry to begin preparing wallet and protocol upgrades for quantum threats.

Current Cryptographic Keys and Quantum Threats

The agency identifies the cryptographic keys controlling funds as the main point of exposure. Wallets use a secret private key to authorize spending and a public key to let the network check that authorization. A sufficiently powerful, fault-tolerant quantum computer could derive a private key from an exposed public key, the agency says. This could allow an attacker to forge signatures and spend funds without the owner's permission.

Quantum-Resistant Cryptography

Europol argues that incremental upgrades and post-quantum cryptography give cryptocurrencies a path to adapt. Its proposed response depends on developers, providers, and users completing the defensive changes. Blockchain projects should prioritize integrating post-quantum cryptographic algorithms into their core protocols and support wallet providers in implementing those changes. Providers should begin testing and deploying compatible wallets and explain the risks and benefits to users.

Phased Transition and Challenges

The report describes deploying new cryptographic standards across millions of wallets and nodes as a resource-intensive, multi-year undertaking. Technical adoption must be matched by community consensus, making the organization of the transition a security concern in its own right. Wallets could need hardware upgrades if existing devices become incompatible with the new arrangements. For holdings recorded as unspent transaction outputs, or UTXOs, migration also requires transactions registered on the blockchain.

Early Preparation and Coordination

Europol favors a phased approach and prioritizing holdings facing higher risk, allowing the ecosystem to work through compatibility, capacity, and governance constraints. The agency's accompanying announcement calls for preparation before the threat becomes practical. The immediate task is to test upgrades, coordinate their deployment, and explain future migration requirements.

Conclusion

The timing of a capable quantum computer remains uncertain; the report's rationale for starting now is the time needed to make those changes.