ECC (including Curve25519) is not secure in a quantum computing world, Shor's algorithm solves discrete log efficiently. I am not a deep expert in this field b

ECC (including Curve25519) is not secure in a quantum computing world, Shor's algorithm solves discrete log efficiently. I am not a deep expert in this field but there is a lot of work in post-quantum crypto that derives security from the hardness of some lattice-based problems instead of discrete log (E.g. New Hope being used in an experiment in Chrome is based on RLWE, I think).