[tor-dev] Shor's Algorithm meets Lattices

[bancfc at openmailbox.org]

In a new paper Peter Shor extends his quantum algorithm to solving a 
variant of the Closest Lattice-Vector Problem in polynomial time. With 
some future tweaking it can be used against the entire family of Lattice 
based crypto.

While an error in the calculations has been pointed out and the paper 
will be withdrawn, this isn't reassuring since a revised version where 
this still holds is probable.

Its available on arxiv until Monday so grab a copy before then:

https://arxiv.org/pdf/1611.06999.pdf


Without Lattice crypto we're stuck with some very ugly choices as Isis 
pointed out. McEliece is huge. SIDH is slow and brittle. The PQ future 
looks grim fam :(