>"therefore, if you are running a legacy system which had not yet upgraded from RSA to ECC, you should not bother to do so, and instead should save money for th

>"therefore, if you are running a legacy system which had not yet upgraded from RSA to ECC, you should not bother to do so, and instead should save money for the future upgrade to post-quantum protocols." (WTF? Most people thought the threat of quantum computers is serious, but ECC should be good for another ten years, and one should should definitely upgrade to ECC, ...) The government moves much more slowly than consumer-oriented high-tech companies. Upgrading a large legacy defense system might very well take longer than 10 years. (And the NSA's advice mentioned above is directed toward government and contractors.)