A new wave of research suggests that the arrival of post-quantum cryptography could quietly disrupt one of the core systems crypto exchanges rely on today: how they generate deposit addresses while keeping private keys offline.

This thing is pretty complicated, but it could have a big impact on places like Coinbase and Binance, and that's kind of a big deal.

The System Exchanges Depend On

Most big exchanges use a special kind of wallet called a hierarchical deterministic (HD) wallet. This system was first introduced in something called BIP32, or Bitcoin Improvement Proposal 32. It's a way to make wallets more secure and easier to use.

Here’s the idea in simple terms.

An exchange can keep its private signing key in a secure, offline location, known as cold storage. At the same time, it can have a public key on a server, which is used to generate new deposit addresses for users as needed. This way, the exchange can create a large number of addresses without putting the private key that controls the funds at risk.

The clear distinction between the core infrastructure and security measures has become a crucial element in systems that hold and manage cryptocurrencies.

However, experts warn that this arrangement may not be able to withstand the challenges of a future where quantum security is the norm.

Why Quantum-Resistant Cryptography Changes Things

Experts at Project Eleven, a company that specialises in keeping information safe from quantum computer attacks, are sounding the alarm that some new encryption standards might actually compromise the security of this wallet system.

One example is ML-DSA, a post-quantum digital signature scheme finalised by the U.S. National Institute of Standards and Technology (NIST).

If a blockchain switched to this kind of signature system, the familiar BIP32 trick—generating new addresses from a public key alone—could stop working.

In other words, the private key has to be involved in each and every step of creating new addresses, which is a crucial part of the process.

It might seem like a minor adjustment, but in reality, it has a significant impact on how things work.

More Security… but More Complexity

Without public-key derivation, exchanges would need to involve private keys more often when creating new addresses.

That could mean relying on:

* hardware security modules

* secure enclaves

* air-gapped devices

These solutions are already out there, but they come with a whole lot of extra baggage - like making things more complicated and increasing the chances of something going wrong.

In short, the elegant architecture that exchanges rely on today could disappear.

A Possible Fix

To address the issue, the Project Eleven team proposed a new wallet design that restores a key feature of BIP32 called non-hardened key derivation.

Their new system lets wallets create new public keys without putting private keys at risk, and it works even with quantum-resistant cryptography, which is a big deal for keeping things secure.

Importantly, the design works at the wallet level, meaning blockchains would only need to support the underlying signature scheme.

What This Means for Bitcoin and Ethereum

Bitcoin still doesn't have the ability to work with advanced security systems like ML-DSA that can withstand quantum computer attacks. To add this feature, Bitcoin would need a significant overhaul of its underlying protocol.

Ethereum might have a simpler way forward. It already has a system called account abstraction that lets it use more flexible signature logic. This means that some wallet designs that can resist quantum attacks could be put in place without having to change the underlying protocol.

Preparing for the Quantum Era

We're still a long way from having quantum computers that can crack the secret codes we use today, and it might take years or even decades to get there.

But the crypto industry is already thinking ahead.

If blockchains start using quantum-safe security, it could mean big changes for exchanges, custodians, and payment systems - they might have to completely redo parts of their wallet infrastructure. This would be a major overhaul, requiring significant updates to their systems. Essentially, they would have to rebuild from the ground up, which could be a complex and time-consuming process.

In the world of cryptocurrency, it's rare for changes to infrastructure to remain minor - they often end up having a significant impact.

Post-Quantum Shift Could Force Crypto Exchanges to Rethink Wallet Security

Related Articles

Sarah DeFi

Cryptocurrency — finally simple