I guess it's a good thing that Dan Bernstein (one of the early evangelists for PQ crypto [1]) has been focusing on (pretty) fast code-based quantum-resistant cr

I guess it's a good thing that Dan Bernstein (one of the early evangelists for PQ crypto [1]) has been focusing on (pretty) fast code-based quantum-resistant cryptography lately, instead of lattice-based crypto: http://cr.yp.to/talks/2013.06.12/slides-djb-20130612-a4.pdf http://cr.yp.to/talks/2013.06.12/slides-djb-20130612-a4.pdf http://binary.cr.yp.to/mcbits-20130616.pdf http://binary.cr.yp.to/mcbits-20130616.pdf [1] http://pqcrypto.org/ http://pqcrypto.org/