BIP 360 Proposal and the New P2MR Output Type
BIP 360, a proposal aimed at preparing Bitcoin for future computing threats, has been updated and merged into the official Bitcoin Improvement Proposal (BIP) GitHub repository, marking a new step in efforts to strengthen the network against emerging cryptographic and quantum computing risks. The proposal introduces a new Bitcoin output type called Pay-to-Merkle-Root (P2MR), designed to support quantum-resistant script tree functionality while maintaining compatibility with existing Tapscript infrastructure, according to a note seen by Bitcoin Magazine.
Supporters of BIP 360 describe the proposal as an early move toward quantum-hardening Bitcoin at the protocol level. A merge into the BIP repository does not signal endorsement or future activation; BIPs are merged as part of the open process for documenting or discussing potential upgrades.
Theoretical Risks of Quantum Computing for Bitcoin
Quantum computing has raised concerns across cryptography and cybersecurity fields because sufficiently advanced machines may be able to break widely used cryptographic systems. In Bitcoin's case, the threat centers on the possibility that computers could derive private keys from exposed public keys, leading to stolen funds. While all Bitcoin addresses become vulnerable when spending reveals a public key, some output types carry greater exposure. Taproot addresses, along with Pay-to-Public-Key (P2PK) outputs and reused addresses, are considered more at risk because public keys are visible on-chain.
P2MR is conceptually similar to Taproot but removes a key weakness. Taproot includes a key-path spending method that can expose public keys. The proposed P2MR output type disables that key-path spend and commits only to the script path, reducing the surface area for potential attacks.
Significance of BIP 360 and Future Directions
The BIP's authors say the proposal is meant to serve as a foundation for later upgrades that could introduce post-quantum signature schemes into Bitcoin through follow-on soft forks. The note points to algorithms such as ML-DSA (Dilithium) and SLH-DSA (SPHINCS+) as possible candidates. “Ultimately, the introduction of BIP 360 and P2MR is a first step in a larger set of quantum-resistance proposals that will be necessary to quantum-harden Bitcoin,” said co-author Hunter Beast, a Bitcoin developer and senior protocol engineer at MARA. Beast added that the team is also exploring proposals to address vulnerable coins that are unlikely to move, including long-dormant holdings.
The latest update adds Isabel Foxen Duke as a co-author alongside Beast and cryptographic researcher Ethan Heilman. Duke, a technical communications specialist, said the goal was to make the proposal understandable beyond the developer community. “Given the sensitivity of the subject matter, we aimed to ensure the BIP was written in a manner that was clear and understandable to the general public,” Duke said.
External Environment Moving Toward Quantum Safety
The proposal arrives as governments and major technology firms increase investment in post-quantum cryptography. The U.S. National Security Agency's CNSA 2.0 framework calls for quantum-safe systems by 2030, while the National Institute of Standards and Technology plans to phase out elliptic curve cryptography in federal systems in the mid-2030s. Supporters argue that BIP 360 aligns Bitcoin with a broader shift toward quantum-safe security standards, positioning the network to adapt as computing capabilities advance.