Source time Edition date
Why the Path to Quantum Resistance Runs Uphill for Bitcoin Wallet Makers
为何抗量子之路对比特币钱包制造商而言是上坡路
Trezor CTO Tomáš Sušánka frames the post-quantum upgrade as a cost problem for wallet makers, who must weigh heavier signatures against device limits before committing to a scheme.
Judgment
Trezor CTO Tomáš Sušánka must decide whether Trezor defaults all users to heavier stateless SHRINCS signatures or exposes the 10 times smaller stateful option behind advanced settings, accepting state-tracking and UX costs.
Basis
Sušánka said on MARA Foundation TV that state tracking shouldn’t be the user’s job and that Trezor is considering making heavier stateless SHRINCS signatures the default, with the riskier stateful option behind advanced settings. The mechanism: SHRINCS stateful signatures are a tree of one-time signatures; accidental reuse reveals enough cryptographic information to forge the user’s signature and steal funds. He noted two Trezors with the same recovery seed cannot easily share state, yet stateful signatures are 10 times smaller, so he does not want to discard them.
- Stateful vs stateless10 times smaller
Unclear The source does not specify a timeline, firmware version, or how Trezor would enforce state tracking across multiple devices or recovery backups.
Next Watch for Trezor firmware release notes or Sušánka statements naming whether stateless SHRINCS signatures ship as the default and how the stateful option is gated.