Exchange Ranking
Top Exchanges
24h Volume Ranking
Popularity Ranking
Exchange BTC Balance
Proof of Reserves
Decentralized Exchanges
Funding Rate
Funding Heatmap
Liquidation Data
Max Pain
Long/Short Ratio
Whale L/S Ratio
Binance/Okex/Huobi L/S
Bitfinex Margin L/S
ETF Tracker
Solana ETF
XRP ETF
Hong Kong ETF
Bitcoin Treasuries
Crypto Reversal
Ethereum Reserves
HyperLiquid Wallet Analysis
Hyperliquid Whale Watch
Large Transactions
On-chain Movement
Bitcoin ROI
Stablecoin Market Cap
Options Analysis
News
Articles
Economic Calendar
Features
Wallet
Contract Calculator
Security
Collections
Watchlist
Following
BTC Coinbase 首席密码学家：为应对量子计算威胁，构建适应多种签名方案的灵活架构
据 Coinbase 首席密码学家耶胡达·林德尔（Yehuda Lindell）透露，如果具有密码学相关能力的量子计算机最终成为比特币安全的现实威胁，Coinbase 希望提前部署保护措施，以便在比特币及其他数字资产走向任何技术方向时都能从容应对。
在最近一次接受 MARA Foundation TV 采访时，这位加密货币交易所的密码学负责人告诉主持人伊莎贝尔·福克斯恩·杜克（Isabel Foxen Duke），公司正在设计其“后量子”安全防御体系，以支持潜在的各种技术重构方案。目前，比特币在实践中将采用何种后量子签名方案仍不明朗。
“不太可能所有人都使用同一种签名方案，”林德尔在谈及各网络最终采用的标准时表示，“这意味着我们必须为不同区块链上的不同结果做好准备。”
Coinbase 代表黑石集团（BlackRock）等机构管理着约 2500 亿美元的资产，多年来一直在不断完善相关流程。如今，它正着手为一个更具挑战性的世界做准备——在这个世界中，该安排的核心基石——多方计算（MPC）——在比特币的案例中甚至可能变得不可行。
MPC 的功能类似于比特币的多重签名设置，允许不同各方持有私钥的不同“份额”，使多个签名者能够执行交易，而无需让完整的私钥暴露在任何单一设备上。
虽然比特币的原生脚本语言允许用户通过在链上直接强制执行法定人数规则来创建多重签名设置，但 MPC 则利用特定的密码学函数在链下运行。由于签署单个交易需要一定数量的密钥份额，因此完整的密钥永远不会在单一位置组装，从而有效地消除了单点故障。
然而，随着比特币为后量子时代做准备，专家们日益担心并非所有后量子签名方案都“适合 MPC”。具体而言，基于哈希的签名可能缺乏传统密码学密钥拆分所需的底层算术结构。虽然正是这种数学结构的缺失使得基于哈希的签名被认为能抵御量子威胁，但这同时也使其在构建 MPC 基础设施时难以处理。
“是否‘适合 MPC’会产生巨大的差异，”林德尔解释道。尽管最近之前人们普遍认为使用基于哈希的签名执行 MPC 是不可能的，但包括丹·博内（Dan Boneh）在内的顶尖密码学家正在积极研究潜在的解决方案，正如近期发表的《PRAWNS》论文中所详述的那样。然而，由于这项研究仍处于高度实验阶段，目前尚不清楚能否为基于哈希的签名开发出可行的类似 MPC 的方案。
Wallet developers, including Charles Guillemet, chief technology officer at Ledger, have also raised concerns about hash-based signatures.
If Bitcoin adopts a post-quantum solution that is incompatible with MPC, Coinbase is studying an alternative architecture with a programmable hardware security module (HSM) as the core-a digital vault of encryption keys located in a private data center.
Under this arrangement, the private key will be encrypted using post-quantum cryptography and will only be assembled inside the physically secure HSM. Although retaining full keys in one place-even temporarily-is theoretically less secure than traditional MPC, HSM provides strong protection under these limitations. Lindell pointed out that strict physical bypass channel protection and strict code upload controls made him feel at ease with this setting.
Given the uncertainty about Bitcoin's potential post-quantum upgrades, Lindell said Coinbase is designing its escrow architecture to make it neutral and adaptable to any signature scheme Bitcoin may adopt in the next few years.
While the timetable for quantum security measures after Coinbase is completed remains uncertain, Lindell added that once it is completed,"I can say,'I can support anything.' We no longer worry that certain blockchains [will] decide to use technologies that we cannot support."
