量子计算机将比我们想象的更快打破加密货币

Frequently asked questions

量子计算机会破解Bitcoin吗？

Yes. Bitcoin uses ECDSA on the secp256k1 curve for transaction signing. Shor's algorithm, published in 1994 by mathematician Peter Shor, solves the elliptic curve discrete logarithm problem in polynomial time on a quantum computer. This means a sufficiently powerful quantum computer can derive any Bitcoin private key from its exposed public key. Every spent Bitcoin transaction has already published its public key on an immutable blockchain. Those keys are permanently exposed and waiting for quantum decryption.

When will quantum computers be powerful enough to break crypto?

IBM, Google, IonQ, and PsiQuantum are all scaling toward fault-tolerant quantum computers. The IBM roadmap puts Starling at roughly 200 logical qubits in 2029 and Blue Jay at over 2,000 logical qubits, roughly 100,000 physical, in 2033. The bar to break Bitcoin sits between those two milestones: Google Quantum AI, working with the Ethereum Foundation and Stanford, put the cost of breaking ECDSA secp256k1 at 1,200 to 1,450 logical qubits inside fewer than 500,000 physical qubits in March 2026. Best public hardware today is near 2,500 physical qubits and none of it is fault-tolerant at scale. Hardware roadmaps reach the needed scale between 2028 (IonQ, on paper) and 2033 (IBM Blue Jay), though nobody knows when machines capable of running Shor's algorithm at scale between 2029 and 2033. The DOE Genesis Mission is already tying AI and quantum computing together at national laboratories, accelerating timelines beyond what public roadmaps suggest.

What is harvest now decrypt later?

Harvest now decrypt later is an attack strategy where adversaries record encrypted data and blockchain transactions today, storing them until quantum computers can break the encryption. For cryptocurrency, every ECDSA signature on a public blockchain is already harvested. Nation-state actors with storage capacity are building quantum decryption queues right now. When the hardware arrives, those harvested public keys yield private keys instantly.

Can Bitcoin fork to become quantum-safe?

Bitcoin can fork its protocol going forward, but a fork cannot retroactively secure old keys. Every coin sitting in an address created under ECDSA stays bound to ECDSA forever unless the owner manually moves it to a new quantum-safe address. Any public key already revealed on the blockchain is permanently exposed in a post-quantum world. A fork changes future rules, not past cryptography. Legacy chains can add quantum-resistant options, but they can never be post-quantum from genesis.

What is SynergyX and why is it quantum-resistant?

SynergyX (SYNX) is a Layer-1 blockchain built with post-quantum cryptography from genesis; it is transparent by default, with optional private sends built on post-quantum primitives. It uses Kyber-768 (NIST FIPS 203) for key encapsulation and SPHINCS+-SHAKE-128s (NIST FIPS 205) for transaction signing. Every wallet, every transaction, and every node-to-node communication uses these algorithms at the protocol level. There is no ECDSA fallback and no legacy cryptography to phase out. The maximum supply is locked at 77.7 million, distributed over decades with no pre-sale allocation.

How does SynergyX wallet generation work?

When a user creates a new SynergyX wallet, a cryptographically secure random seed of 256 bits of entropy is generated. The seed is expanded using SHAKE256 to derive separate key material for Kyber and SPHINCS+. A Kyber-768 keypair is generated for encrypted communications and key exchange. A SPHINCS+-SHAKE-128s keypair is generated for transaction signing. A SynX address starts with SX and is derived from the wallet’s post-quantum public key.

Why can't existing cryptocurrencies just update to become quantum resistant?

Existing cryptocurrencies cannot simply update because their address formats, signature verification logic, and transaction structures are built around ECDSA or EdDSA. SPHINCS+ signatures are significantly larger than ECDSA signatures, requiring block size changes. Every wallet, exchange, and hardware device would need replacement. Billions of dollars in UTXOs would need migration, and lost or abandoned wallets can never be migrated. The consensus process for such a hard fork takes years, and the quantum timeline does not leave enough runway.

What encryption methods have already been broken?

The history of broken encryption is clear: MD5 was considered gold standard for websites but was dead by 2005. SHA-1 was broken by 2017. DES was defeated by 1999. RC4 was dead by 2015. Every generation of encryption that was once considered unbreakable has eventually fallen to advancing computation. ECDSA secp256k1, used by Bitcoin and Ethereum, faces the same fate from quantum computing. Nothing in cryptographic history has remained secure forever.