Yes, but that problem also exists without quantum computers (qc). Advances may break existing crypto, even if proven secure under certain assumptions. This is b

Yes, but that problem also exists without quantum computers (qc). Advances may break existing crypto, even if proven secure under certain assumptions. This is because the advance may introduce a shortcut that proves the assumptions are unsufficient. NTRU has been proven safe from known quantum attacks and has been around for some time. There certainly were efforts to attack NTRU using qc. If it would be included in OpenSSL and NSS, it is likely those efforts would be intensified. I therefore suggest that getting it into those libraries may be the best we can do right now.