<p>The present algorithm for public-key/private key cryptogrophy won't survive the invention of quantum computers. It will likely be deprcated in a few decades. If you don't update at that point people with quantum computer will be able to calculate your private key and spend your coins. </p>

CC BY-SA 3.0
2013-04-03T12:08:42.197Z
So everyone has to upgrade to an Intel Quantum at the same time or any late adopters have their savings stolen?
Jason Kleban
CC BY-SA 3.0
2013-04-09T16:39:48.987Z
@uosa: We don't know whether there a possible encryption scheme by which you can do public-key/private key cryptogrophy with a regular PC that can't be broken by a quantum computer. Progress in mathematics is hard to forcast.
Christian
CC BY-SA 3.0
2013-04-18T07:40:22.777Z
Shor's algorithm doesn't impact ECDSA which is why the NSA uses it. Quantum computers currently only impact DLP and RSA based public key systems. Unless there is new research that I'm not aware of
Charles Hoskinson
CC BY-SA 3.0
2013-03-05T20:45:03.500Z
2013-03-05T20:45:03.500Z
Christian
<p>You always can spend bitcoins for which you own the private key. No matter upgrades, versions, protocol changes. If you have your private key then you can get / calculate / derive the then-current key to open your Bitcoin wallet.</p>

<p>May be things become obsolete, like floppy drives.</p>

<p>What's more important is that hash functions used now may be broken at some point of time. In this case, you will have only hours to react. Or, community may save you through some kind of counter measures.</p>

CC BY-SA 3.0
2013-02-28T08:34:31.610Z
2013-02-28T08:34:31.610Z
vi.su.
<p>There are a few things one needs to consider:</p>

<ul>
<li><p>Bitcoin software is bound to change. It will be adapted to new systems, hardware, and so forth. Expecting a program from now to work 100 years from now is probably not going to happen.</p></li>
<li><p>Bitcoin protocol probably will change, but the change will be less drastic. For example, block size might get changed. If a protocol changes, it makes software that uses old protocol not able to properly communicate with the network.</p></li>
<li><p>The last part that needs to be addressed, is whether or not the way bitcoins are "stored" will change. At the moment, everything is handled using secp256k1 ECDSA algorithm. In order to spend bitcoins, one needs to sign a transaction with their private key. The exact specific of what such a transaction might look like is likely to change, but the algorithm itself is very unlikely to change unless some serious threat appears for Bitcoin. At the moment, quantum computers are a thing that might or might not brake that algorithm in the future. If that was to happen, the algorithm would be changed.</p></li>
</ul>

<p>In order to be able to access one's bitcoins 100 years from now, one would need to get their hands on a piece of software from that time (pretty easy), that works with the protocol at that time (very easy), and the Bitcoin protocol must still accept ECDSA signatures or at least private keys (unknown).</p>

<p>Provided secp256k1 is still secure in the future, your coins will be yours to claim (unless someone adds an unlikely exception of "coins older than X years cannot be spent").</p>

CC BY-SA 3.0
2013-02-28T08:25:37.790Z
2013-02-28T08:25:37.790Z
ThePiachu
<p>Say someone locks away a wallet in durable storage for 100 years and BitCoins are still actively used.</p>

<p>Are those BitCoins still going to be valid if they haven't been traded in/upgraded to the newer protocols?</p>

<p>I've seen other answers on this site that suggest either that 1) <a href="https://bitcoin.stackexchange.com/a/1382/614">BitCoins will need to be upgraded by a certain block</a> (at the switching of the hash function and protocol, for example, to adapt to any discovered weaknesses) OR 2) <a href="https://bitcoin.stackexchange.com/a/3399/614">that they will forever be valid</a> but that future equipment might be able to steal away those bitcoins (or even generate never-before-seen ones under the older protocols).</p>

<p>1) Would be awful, it seems to me.  What if you miss the deadline because you're in a coma and nobody knows to keep your wallet updated?</p>

<p>2) Seems like a danger for a deflationary currency where the older money is easier to counterfeit AND is worth more.</p>

<p>Perhaps I'm just confusing matters of BitCoin, Blocks, and Wallets?</p>

<p>As I understand it, if the first BitCoin ever made had been squirreled away and the currency takes off as a success, the novel and deflationary nature of the currency will make the exchange value of that first BitCoin very high compared to it's initial exchange value.</p>

<p>Over time, weaknesses in the original hash functions may be found and counterfeiting early BitCoin may become practical.  And the reward for doing so seems to me that it would be higher than counterfeiting BitCoin of the future-present!</p>

<p>In the physical world, finding a buried treasure of gold or a sack of US dollars has a lot of protections against counterfeiting.  I don't know how old of a design of US dollars banks would accept, but I guess that as long as you can do a convincing show of where you found it and forgery experts examine it all different ways and it checks out, they you're entitled to trade up.  Gold is pretty easy - can't <em>fool</em> people for too long.</p>

<p>Authenticity of BitCoin is all in the math, so if the technology to forge the math is practical at any point in the assumed infinite future of technological advancements then the forgery would be undetectable.</p>

<p>Due to inflation, an old $20 would get you a lot more than it did today.  But then again, I'm assuming that the old $20 and the new $20 are equivalent, once the old $20's authenticity is established.  And due to deflation, a BitCoin today will get you a lot less than the equivalent BitCoin in the future.</p>

<p>With inflation, the standard denomination of the future might be $100s or $1,000 or $10,000 ...  so a recovered or counterfeit old $20 isn't worth much, and a sack of $10,000 bills from 1960 would be hard to explain!</p>

<p>With deflation, the standard denominations get smaller, so a counterfeit old BitCoin would be easy to explain and forge.</p>

<p>So we could require that people keep their wallets updated.  You mean if I don't keep up with my <a href="http://update.microsoft.com" rel="nofollow noreferrer">BitCoin Updates every Tuesday</a> that my bank accounts would be wiped clean?  But that seems unacceptable to me - seems that a powerful group could do a lot of damage to a person or a population by somehow disrupting or disallowing access to their wallets.  I don't know how that would play out, but it seems plausible that a scheme could be devised if money expires like that.</p>

CC BY-SA 3.0
2013-02-28T05:55:08.410Z
I see a valid question here, but the title should actually ask a question then act like a subject line on an email
makerofthings7
CC BY-SA 3.0
2013-02-28T08:19:56.717Z
I agree with @makerofthings7 -- rephrase your title as a question.
gosmond
CC BY-SA 3.0
2013-03-06T20:37:27.307Z
I don't get why you're talking about counterfeiting. The risk of theft is valid, but there isn't much anybody can do about that. Just pray that Sepc256k1 remains secure.
CodesInChaos
CC BY-SA 3.0
2013-04-03T12:12:23.030Z
Well counterfeiting is like mining, except that it's shoehorning in of an old-style bitcoin into the historical chain of transactions.  It's the difference between painting a new masterpiece vs faking the discovery of a "previously unseen" Picaso.
Jason Kleban
CC BY-SA 3.0
2013-04-05T19:44:56.703Z
I guess if the historical chain is re-signed with ever-modern security then counterfeiting the historical record won't be an option
Jason Kleban
<hash><future-proof>
Future-proofing a deflationary currency from future counterfeiting
Jason Kleban
# Future-proofing a deflationary currency from future counterfeiting

(Asked by: username_0 on 2013-02-28)

Say someone locks away a wallet in durable storage for 100 years and BitCoins are still actively used.

Are those BitCoins still going to be valid if they haven't been traded in/upgraded to the newer protocols?

I've seen other answers on this site that suggest either that 1) [BitCoins will need to be upgraded by a certain block](https://bitcoin.stackexchange.com/a/1382/614) (at the switching of the hash function and protocol, for example, to adapt to any discovered weaknesses) OR 2) [that they will forever be valid](https://bitcoin.stackexchange.com/a/3399/614) but that future equipment might be able to steal away those bitcoins (or even generate never-before-seen ones under the older protocols).

1) Would be awful, it seems to me. What if you miss the deadline because you're in a coma and nobody knows to keep your wallet updated?

2) Seems like a danger for a deflationary currency where the older money is easier to counterfeit AND is worth more.

Perhaps I'm just confusing matters of BitCoin, Blocks, and Wallets?

As I understand it, if the first BitCoin ever made had been squirreled away and the currency takes off as a success, the novel and deflationary nature of the currency will make the exchange value of that first BitCoin very high compared to it's initial exchange value.

Over time, weaknesses in the original hash functions may be found and counterfeiting early BitCoin may become practical. And the reward for doing so seems to me that it would be higher than counterfeiting BitCoin of the future-present!

In the physical world, finding a buried treasure of gold or a sack of US dollars has a lot of protections against counterfeiting. I don't know how old of a design of US dollars banks would accept, but I guess that as long as you can do a convincing show of where you found it and forgery experts examine it all different ways and it checks out, they you're entitled to trade up. Gold is pretty easy - can't *fool* people for too long.

Authenticity of BitCoin is all in the math, so if the technology to forge the math is practical at any point in the assumed infinite future of technological advancements then the forgery would be undetectable.

Due to inflation, an old $20 would get you a lot more than it did today. But then again, I'm assuming that the old $20 and the new $20 are equivalent, once the old $20's authenticity is established. And due to deflation, a BitCoin today will get you a lot less than the equivalent BitCoin in the future.

With inflation, the standard denomination of the future might be $100s or $1,000 or $10,000 ... so a recovered or counterfeit old $20 isn't worth much, and a sack of $10,000 bills from 1960 would be hard to explain!

With deflation, the standard denominations get smaller, so a counterfeit old BitCoin would be easy to explain and forge.

So we could require that people keep their wallets updated. You mean if I don't keep up with my [BitCoin Updates every Tuesday](http://update.microsoft.com) that my bank accounts would be wiped clean? But that seems unacceptable to me - seems that a powerful group could do a lot of damage to a person or a population by somehow disrupting or disallowing access to their wallets. I don't know how that would play out, but it seems plausible that a scheme could be devised if money expires like that.

**Tags:** hash, future-proof

> **Comments:**
> **username_1**: I see a valid question here, but the title should actually ask a question then act like a subject line on an email  
> **username_2**: I agree with @username_1 -- rephrase your title as a question.  
> **username_3**: I don't get why you're talking about counterfeiting. The risk of theft is valid, but there isn't much anybody can do about that. Just pray that Sepc256k1 remains secure.  
> **username_0**: Well counterfeiting is like mining, except that it's shoehorning in of an old-style bitcoin into the historical chain of transactions.  It's the difference between painting a new masterpiece vs faking the discovery of a "previously unseen" Picaso.  
> **username_0**: I guess if the historical chain is re-signed with ever-modern security then counterfeiting the historical record won't be an option  

---

## 3 answers

### Answer by username_7 on 2013-02-28. Score: 3 | Accepted answer

There are a few things one needs to consider:

* Bitcoin software is bound to change. It will be adapted to new systems, hardware, and so forth. Expecting a program from now to work 100 years from now is probably not going to happen.
* Bitcoin protocol probably will change, but the change will be less drastic. For example, block size might get changed. If a protocol changes, it makes software that uses old protocol not able to properly communicate with the network.
* The last part that needs to be addressed, is whether or not the way bitcoins are "stored" will change. At the moment, everything is handled using secp256k1 ECDSA algorithm. In order to spend bitcoins, one needs to sign a transaction with their private key. The exact specific of what such a transaction might look like is likely to change, but the algorithm itself is very unlikely to change unless some serious threat appears for Bitcoin. At the moment, quantum computers are a thing that might or might not brake that algorithm in the future. If that was to happen, the algorithm would be changed.

In order to be able to access one's bitcoins 100 years from now, one would need to get their hands on a piece of software from that time (pretty easy), that works with the protocol at that time (very easy), and the Bitcoin protocol must still accept ECDSA signatures or at least private keys (unknown).

Provided secp256k1 is still secure in the future, your coins will be yours to claim (unless someone adds an unlikely exception of "coins older than X years cannot be spent").


---

### Answer by username_4 on 2013-03-05. Score: 3

The present algorithm for public-key/private key cryptogrophy won't survive the invention of quantum computers. It will likely be deprcated in a few decades. If you don't update at that point people with quantum computer will be able to calculate your private key and spend your coins.

> **Comments:**
> **username_0**: So everyone has to upgrade to an Intel Quantum at the same time or any late adopters have their savings stolen?  
> **username_4**: @uosa: We don't know whether there a possible encryption scheme by which you can do public-key/private key cryptogrophy with a regular PC that can't be broken by a quantum computer. Progress in mathematics is hard to forcast.  
> **username_5**: Shor's algorithm doesn't impact ECDSA which is why the NSA uses it. Quantum computers currently only impact DLP and RSA based public key systems. Unless there is new research that I'm not aware of  

---

### Answer by username_6 on 2013-02-28. Score: 1

You always can spend bitcoins for which you own the private key. No matter upgrades, versions, protocol changes. If you have your private key then you can get / calculate / derive the then-current key to open your Bitcoin wallet.

May be things become obsolete, like floppy drives.

What's more important is that hash functions used now may be broken at some point of time. In this case, you will have only hours to react. Or, community may save you through some kind of counter measures.


---

