Wild result - 17x fewer gates for 12% more qubits is a massive trade-off improvement. But Q-day getting cheaper on paper is different from Q-day being feasible - we still need millions of error-corrected qubits, and error correction is the real wall. Bitcoin has time to migrate to P2QRH or other post-quantum sig schemes, Taproot already makes it easier to upgrade. Question: does Claude's optimization also apply to Schnorr vs ECDSA equally, or is there a difference in gate count?
Wild result - 17x fewer gates for 12% more qubits is a massive trade-off improvement. But Q-day getting cheaper on paper is different from Q-day being feasible - we still need millions of error-corrected qubits, and error correction is the real wall. Bitcoin has time to migrate to P2QRH or other post-quantum sig schemes, Taproot already makes it easier to upgrade. Question: does Claude's optimization also apply to Schnorr vs ECDSA equally, or is there a difference in gate count?