x
The threat of quantum computing to blockchain security has evolved from a distant theoretical theoretical concern into one of the most pressing architectural challenges facing decentralized networks. Standard asymmetric cryptographic primitives, such as the Elliptic Curve Digital Signature Algorithm (ECDSA) and Schnorr signatures, form the structural bedrock of Bitcoin. However, sufficiently powerful quantum hardware running Shor’s algorithm could eventually reverse-engineer private keys from exposed public keys, putting billions of pounds worth of digital assets at risk.
To address this existential challenge, a new Bitcoin Improvement Proposal (BIP) has been formally published for SHRINCS—a bespoke post-quantum signature scheme developed by Blockstream Research. Designed specifically to protect Bitcoin against future quantum attacks without overwhelming its block capacity, SHRINCS represents a landmark step in post-quantum cryptography (PQC).
Here is a comprehensive breakdown of how SHRINCS works, how it solves the blockspace conundrum, and the crucial trade-offs it introduces to the network.
Transitioning Bitcoin to a post-quantum environment is fundamentally constrained by network physics and block space economics. Most post-quantum signature schemes endorsed by the National Institute of Standards and Technology (NIST)—primarily hash-based or lattice-based algorithms—are structurally massive compared to current standards.
While a traditional Schnorr signature occupies a slim 64 bytes and an ECDSA signature requires roughly 70 bytes, standard NIST-approved post-quantum alternatives are between 38 and 123 times larger.
If Bitcoin were to blindly adopt a standard NIST signature scheme like SPHINCS+ or ML-DSA without structural modifications, the performance impact would be severe:
Imposing signatures that consume tens of kilobytes per transaction would clog the mempool, push node validation requirements beyond the reach of home hardware, and drastically escalate transaction fees.
Initially unveiled in late 2025 by Blockstream researchers Jonas Nick and Mikhail Kudinov, SHRINCS is the first concrete post-quantum signature proposal engineered specifically for Bitcoin’s operational constraints.
Unlike general-purpose post-quantum primitives, SHRINCS relies on security assumptions rooted in SHA-256—the exact same cryptographic hash function that underpins Bitcoin’s Proof-of-Work mining algorithm. This architectural alignment ensures that the security of Bitcoin’s signature layer relies on a primitive that the network has rigorously battle-tested for over seventeen years.
Key characteristics of the SHRINCS framework include:
Although a 548-byte signature is still roughly nine times larger than a 64-byte Schnorr signature, SHRINCS avoids crippling Bitcoin’s overall transaction capacity by taking advantage of Segregated Witness (SegWit).
Under the SegWit framework, signature data resides within the witness portion of a transaction block, which benefits from a 75% weight discount compared to standard transaction data. Because witness data places less weight on overall block limits, SHRINCS signatures do not require a controversial nine-fold increase in the underlying block size limit.
According to research estimates, deploying SHRINCS across the network allows Bitcoin to sustain roughly 3 TPS. While this represents a modest reduction from theoretical peak limits under pure Schnorr adoption, it maintains performance levels remarkably close to real-world operational speeds today, offering a viable middle ground between security and throughput.
While SHRINCS provides an elegant solution to the data payload problem, it is not without compromises. As highlighted in the newly published BIP draft, the scheme introduces new operational complexities and wallet-side requirements.
1. Stateful Key Management
To keep signature sizes small, SHRINCS abandons the completely stateless design of heavy schemes like SPHINCS+. Instead, it uses a stateful model where the wallet tracks spent keys locally on the user's device.
2. Large Stateless Fallback Transactions
If a user loses their signing device or local state data, recovering funds using a master seed phrase requires switching to a "stateless fallback" mode. These recovery signatures are substantially larger—requiring approximately 5,777 bytes of block space—resulting in significantly higher network fees for that specific restoration transaction.
3. Hardware Wallet Risks
Running complex post-quantum logic on low-power hardware wallets introduces new technical hurdles. For example, key structures generated using advanced optimisations like "hypertree pruning" must be strictly supported across all wallet software used by an individual. Attempting to import a pruned key into an incompatible hardware interface could lead to an unrecoverable loss of funds.
To mitigate these multi-device recovery challenges, researchers are concurrently evaluating a companion protocol known as SHRIMPS, designed to synchronize state safely across backup devices sharing the same seed phrase.
4. Ongoing Cryptanalysis
The BIP explicit notes that formal security proofs remain a "TODO" item. Unlike NIST-approved signatures that have undergone years of intense global cryptanalysis, SHRINCS is a novel proposal that requires prolonged scrutiny from the broader cryptographic community before it can be considered mature enough for consensus activation.
Blockstream’s decision to publish SHRINCS as a standalone BIP reflects a pragmatic engineering strategy: isolating signature optimisation from more radical protocol overhauls.
However, researchers are keeping broader possibilities open. One prospective avenue involves pairing post-quantum schemes with Zero-Knowledge (ZK) STARK proof aggregation. By bundling hundreds of individual SHRINCS signatures into a single, compact zero-knowledge proof per block, Bitcoin could theoretically bypass block space bottlenecks entirely—potentially doubling network throughput to 6.7 TPS.
Yet, introducing ZK-proof verification directly into Bitcoin consensus would represent a massive technical paradigm shift, facing steep hurdles to achieve community consensus.
Ultimately, the primary obstacle facing Bitcoin’s post-quantum transition may not be cryptographic mathematics, but governance. Activating any post-quantum signature scheme will require a soft or hard fork across thousands of independently operated nodes worldwide. Establishing consensus on which trade-offs the network should accept—whether statefulness, larger signatures, or added consensus rules—remains the final, crucial step in securing Bitcoin for the quantum era.
Disclaimer: This article is provided for informational purposes only, mistakes may be made, and it's not offered or intended to be used as legal, tax, investment, financial, or any other advice.
