user138599: Im looking for an address type for long term storage of btc but I don't know what to choose.Im not sure if Taproot is more secure than segwit.
Another Question I have about Taproot is that if it uses Schnorr's Signature instead of ECDSA than it stronger against quantum computing compared to the other addresses types or not :)?

user125079: Schnorr signatures are proven to be secure and robust against chosen-message attacks in the random oracle model. In practice, this implies that as long as the condensation function behaves ideally,
the only way to "break" Schnorr's scheme is to solve the discrete logarithm problem.
Conversely, the construction of ECDSA does not guarantee its safety. The ECDSA scheme contains two independent condensation functions. One function H is used to hash the message and the other function F to calculate the signature component r. The value r is calculated by applying the condensation function F to the x-abstract of the point (x1, y1). The safety of the scheme is proved when both functions satisfy the random oracle model but practically, the function F does not.
While both are based on discrete logarithm problem, no one of them is secure against quantum computing. We are far away from such of attacks, so you don't have to worry.

138599: <p>Im looking for an address type for long term storage of btc but I don't know what to choose.Im not sure if Taproot is more secure than segwit.</p>
<p>Another Question I have about Taproot is that if it uses Schnorr's Signature instead of ECDSA than it stronger against quantum computing compared to the other addresses types or not :)?</p>
 125079: <p>Schnorr signatures are proven to be secure and robust against chosen-message attacks in the random oracle model. In practice, this implies that as long as the condensation function behaves ideally,
the only way to &quot;break&quot; Schnorr's scheme is to solve the discrete logarithm problem.</p>
<p>Conversely, the construction of ECDSA does not guarantee its safety. The ECDSA scheme contains two independent condensation functions. One function <code>H</code> is used to hash the message and the other function F to calculate the signature component <code>r</code>. The value r is calculated by applying the condensation function <code>F</code> to the x-abstract of the point <code>(x1, y1)</code>. The safety of the scheme is proved when both functions satisfy the random oracle model but practically, the function F does not.</p>
<p>While both are based on discrete logarithm problem, no one of them is secure against quantum computing. We are far away from such of attacks, so you don't have to worry.</p>
