Embed Notice

@cthos @aud OK, so the quantum thing. In some sense, you have it exactly right — the subtlety comes into (a) when we expect quantum computers that can break meaningful RSA keysizes to be developed, (b) when can we expect post-quantum cryptography systems to be successfully deployed, and (c) are there any improvements in quantum cryptanalysis algorithms that may impact post-quantum cryptography.

Alternatively, do we live in a world in which quantum-resistant cryptography is possible?