chain · quantum risk
Early Bitcoin P2PK Outputs and Quantum Exposure
Verdict
P2PK and similar constructions that place the raw public key in the locking script are maximally exposed to Shor-class key recovery—no “wait until spend” grace period.
Overview
Not every Bitcoin output hides the public key behind a hash. Pay-to-public-key (P2PK) scripts effectively put the key in the open. That pattern appears in early Bitcoin history and is the textbook case for “quantum theft if the private key still exists and a CRQC arrives.”
Hashed address formats (e.g. P2PKH and later SegWit/Taproot constructions) were improvements for several reasons; quantum exposure timing is one of them. Understanding P2PK prevents over-generalizing “all Bitcoin is equally safe until spent.”
This spoke supports the main Bitcoin hub with a precise mechanism page—useful for educators, journalists, and risk teams who need correct nuance.
What breaks
- UTXOs whose locking script already contains the public key
- Long-dormant early coinbases and outputs never migrated to hashed address forms
Mitigations
- Where keys are still controlled, migrate value to modern address types with strong operational security
- Researchers and historians: treat exposed early keys as a permanent public cryptanalytic dataset once CRQCs exist
- Do not assume “lost coins” are irrelevant to network trust narratives
FAQ
Are all Satoshi-era coins P2PK?
Not all historical outputs share one script type. P2PK is an important early pattern; always inspect the actual script class when making claims about a specific UTXO.
Does this mean Bitcoin is already broken?
No. It means a subset of outputs has worse key-exposure properties. Classical security still holds without a CRQC; planning should still prioritize honesty about that subset.
Key concepts (technical dictionary)
Terms used on this page — open a definition: