See 9.1. If ECDSA or Curve25519 are broken (e.g. because of quantum crypto), we can simply introduce a PKEY replacement (such as PKEY2) and migrate. EDIT: How

See 9.1. If ECDSA or Curve25519 are broken (e.g. because of quantum crypto), we can simply introduce a PKEY replacement (such as PKEY2) and migrate. EDIT: However, point well taken. This needs more space in the draft and is definitely a point to address.