bristleconepine

I was asked by several people what he means by that and if $kas is also "secure against Quantum brute-forcing", or does Hooshite offer some novel quantum protection. The answer is that as of now, no proof-of-work is secure against quantum mining. The consequences of quantum mining are still poorly understood, but even the little we do understand exhibits problems nobody knows how to solve yet. See for example here: arxiv.org/abs/1804.08118 When factoring in the fact that proof-of-work networks do difficulty adjustment, the situation actually becomes much worse: any quantum adversary of any size can do a double-spend attack, given that the rest of the network is classical! See here: arxiv.org/abs/2403.08023 The saving grace to both attacks is that their effectiveness (in terms of orphan rate increase in the former and speed of the attack in the latter) is directly proportional to the hashrate fraction of the quantum attacker. Actually, Kaspa (and by second-order proxy, Hooshite) are more susceptible to the latter attack, as its length is inversely proportional to the block rate. The only thing that's currently known in any way to protect PoW networks from quantum mining threats is having a high global hashrate, making it exceedingly expensive for a quantum adversary to hold a non-negligible share of the hashrate, even in a world where quantum computation is available. (More technically: quantum mining uses an optimization knows as Grover search, that can find an element in an array of size n in time O(sqrt(n)). This optimization uses the hash as a black box. It will work just the same regardless of what hash function is used. Barring a few esoteric examples not used in practice, no hash function is known that has more meaningful optimizations than a Grover brute-force. This includes kHH, SHA-256, and any other hashes you actually get to run into. So anyone saying their hash function is in some way "more quantum resistant" than SHA-256 or any other hash (save a few esoteric example that are quantum broken) is either lying, stupid, or both. I think it is clear which of the three it is in this case)