<p>There's no consensus about the best post-quantum crypto encryption/authentication algorithms, but NIST has <a href="https://csrc.nist.gov/Projects/Post-Quantum-Cryptography" rel="nofollow noreferrer">a competition</a> to choose the best post-quantum crypto algorithms that are asymmetric (where public key and private key different). Surely there's enough time to wait for the competition to end before spending any effort on post-quantum cryptocurrency (Exceptions: qBitcoin, which is impractical, and Bitcoin Candy, which has no progress)</p>

CC BY-SA 4.0
2019-03-23T15:16:18.033Z
2019-03-23T15:16:18.033Z
MCCCS
<p>in follow-up to the question: 85202
There, @Ugam Kamat wrote <em>""ECDSA is the first thing that can get vulnerable with quantum computer. signature will need to move to <strong>post quantum world</strong> much before quantum PoW.""</em></p>

<p>My follow-up to that: 
to which signature concept are experts thinking on moving to in the future, any ideas circulating right now?</p>

<p>thx</p>

<hash><signature><quantum-computing><signature-operations>
Signature digital algorithm in bitcoin, to what will it change in the future?
johnsmiththelird
# Signature digital algorithm in bitcoin, to what will it change in the future?

(Asked by: username_0 on 2019-03-23)

in follow-up to the question: 85202
There, @Ugam Kamat wrote *""ECDSA is the first thing that can get vulnerable with quantum computer. signature will need to move to **post quantum world** much before quantum PoW.""*

My follow-up to that:
to which signature concept are experts thinking on moving to in the future, any ideas circulating right now?

thx

**Tags:** hash, signature, quantum-computing, signature-operations


---

## 1 answers

### Answer by username_1 on 2019-03-23. Score: 1

There's no consensus about the best post-quantum crypto encryption/authentication algorithms, but NIST has [a competition](https://csrc.nist.gov/Projects/Post-Quantum-Cryptography) to choose the best post-quantum crypto algorithms that are asymmetric (where public key and private key different). Surely there's enough time to wait for the competition to end before spending any effort on post-quantum cryptocurrency (Exceptions: qBitcoin, which is impractical, and Bitcoin Candy, which has no progress)


---

