> However on both classical and quantum computers, their security is still just "we haven't thought of any way to break them", and not "we have a proof that the

> However on both classical and quantum computers, their security is still just "we haven't thought of any way to break them", and not "we have a proof that they cannot be broken under <insert model of computation>". Hmm, it's slightly different. There is an algorithm to break ECDSA on quantum computers. We have the algorithm, but we don't know how to build the quantum computer yet.