In theory, it is also broken. It practice, it appears to be slightly harder to break than RSA for the same security level as we define it in non-quantum comput

In theory, it is also broken. It practice, it appears to be slightly harder to break than RSA for the same security level as we define it in non-quantum computing, but not by much.