That's because it's polynomial commitment based on pairing-based cryptography (elliptic curves) but there are schemes based on hash functions (FRI) that are qua

That's because it's polynomial commitment based on pairing-based cryptography (elliptic curves) but there are schemes based on hash functions (FRI) that are quantum secure. The main advantage of pairings is that you can have constant-size commitments. 28:47 - https://www.youtube.com/watch?v=bz16BURH_u8 https://www.youtube.com/watch?v=bz16BURH_u8