Blockstream Quantum-Tests Hardware Wallets
Though the headline might give you an idea that researchers have tested current hardware wallets against quantum computers, the actual experiment was narrower, and understanding the distinction between these two points is important for further reading.
Coinpaper’s interpretation draws from a Blockstream research update from early November, which indicated that devices from Ledger, Trezor, BitBox, and Blockstream’s own Jade line generated experimental post-quantum signatures without requiring new hardware. That’s the established fact. The accompanying claim, that Bitcoin’s existing wallets have now been evaluated against quantum attacks, requires closer examination.
The Strongest Version of the Concern
Let’s first consider the legitimate concern. Bitcoin transactions are authorized using elliptic-curve signatures over secp256k1. When funds are spent, the public key becomes visible on-chain. In theory, a quantum computer running Shor’s algorithm could derive a private key from an exposed public key, potentially allowing an attacker to spend coins they don’t own.
The level of exposure varies. Older pay-to-public-key outputs and reused addresses permanently display their public keys. Newer address types keep the key hidden behind a hash until the coins are moved. Taproot key-path spends fall somewhere in between. Therefore, which coins are vulnerable depends on how they were received and whether they have been previously spent, not on the brand of wallet holding them.
This highlights the core issue. Wallet security in this context is determined by signature schemes and the timing of key exposure. Testing whether existing devices can produce quantum-resistant signatures is valuable because migration to new cryptography is impossible if current hardware can’t perform the necessary calculations. Blockstream’s experiment directly addresses this point.
What Was Actually Measured
Now, let’s scrutinize the evidence. Here’s what the data plainly supports:
- Measured, not simulated against a quantum attacker: The devices produced hash-based signatures. This was a capability test of the hardware, not an attack on it.
- A demonstrated step, not a full result: The wallets successfully signed. No quantum computer was involved in this experiment, which means nothing was broken by one.
- A prototype, not a deployment: The implementations were experimental. The tests didn’t establish complete quantum-resistant firmware or fully functional wallet capabilities.
- Self-published: The information comes from Blockstream’s own quarterly update, a company that is developing the very scheme it’s promoting.
The performance figures are concrete and reported as stated. A compact configuration generating 324-byte signatures took approximately 22 to 42 seconds per signature, with Jade Plus achieving 21.75 seconds. This is slow compared to a standard Bitcoin signature, which takes milliseconds. Though slow enough to impact user experience, it’s fast enough to demonstrate that the operation can run on existing secure elements.
Thus, the finding is genuine but modest. Current hardware can perform the cryptographic work necessary for a quantum-resistant future. However, the implied test in the headline (Bitcoin wallets versus quantum computers) didn’t occur. No qubit count is mentioned because no physical qubits were part of the setup. No estimate for the resources required to break Bitcoin was produced. The experiment and the underlying fear operate on different levels.
Where Migration Work Actually Stands
The protocol itself remains the primary hurdle. Blockstream’s SHRINCS proposal aims to replace elliptic-curve cryptography with hash-based signatures, and keep them compact to avoid bloating transactions and block space. A draft Bitcoin Improvement Proposal (BIP) exists. Bitcoin developers still need to evaluate its security, cost, and compatibility before it can be implemented. Other factions advocate for freezing or migrating quantum-vulnerable coins instead of signing over them.
Elsewhere, other blockchains are further along in publicly demonstrating their efforts. StarkWare launched a Starknet Post-Quantum Hub as a public record of their migration, and explicitly stated that quantum security should be based on evidence, not promises. Though this is a vendor’s position, not independent verification, the principle is valuable. Account-level post-quantum work and hash-based or lattice schemes are being developed openly, which allows for scrutiny and attack by those not involved in their creation.
Google’s own responsible-disclosure work on quantum vulnerabilities falls into the same category: authentic research published by a company with hardware ambitions, which should be read with that context in mind. Infrastructure initiatives like commercial quantum networking contracts are funding calls, not deployed systems, and shouldn’t be interpreted as proof that the quantum threat has arrived.
Where the Evidence Lands
No current hardware-wallet test confirms a quantum break, and Blockstream’s update doesn’t claim one. Today’s quantum machines are not known to pose a threat to Bitcoin’s production cryptography. What the experiment does establish is a narrow but important point: the devices people already own can generate post-quantum signatures, albeit slowly, using experimental firmware that hasn’t been peer-reviewed or released.
The threat model is specific enough to act on: exposed public keys, address reuse, and certain spend paths would be the vulnerable points if a cryptographically relevant quantum machine emerges. The migration choices are concrete enough to audit. Post-quantum signatures are currently believed to be secure under analysis, a stronger and more defensible term than “unbreakable.” Standardized schemes under NIST’s FIPS 203, 204, and 205 have undergone more scrutiny than any proprietary design.
What would change this assessment: a physical qubit count or resource estimate directly linked to secp256k1, independent replication of the wallet tests with published raw data, or a finalized BIP that developers actually adopt. Until then, the practical steps are a wallet-specific audit of your own exposure and careful consideration of who published which claim.
For more information, read our coverage of BIP-360, post-quantum wallet design, and quantum resource estimates.