Embed Notice

@risottobias @dalias @khm @ambiguous_yelp @sammi @joelanman With asymmetric cryptography, you have even more uncertainty from a proofs perspective.

There is no proof that any given number theory operation is a good trapdoor. That's as true for RSA as it is for ECC.

Lattices, codes, isogenies, multivariate schemes, etc. were all considered candidates because they rely on mathematical structures that, even with quantum computers, are not breakable in 2128 queries (or more).

But then SIKE was broken by a laptop on a weekend. And so too was Rainbow.