
Introducing hash-based signatures into Bitcoin will meaningfully increase signature sizes — and reduce throughput, assuming no changes to block size. "I don't think we can only migrate to hash-based signatures without changing anything else. The size of the block might need to be changed," says @Ledger CTO @P3b7_ In the interview, he adds there may be alternative ways to manage signature size — e.g. using zero-knowledge proofs for signature compression — but notes that this option would reduce security versus using a more efficient PQ signature scheme in the first place.
