Hello, I’ve been reading a paper that talks about why the NSA told everyone to move to quantum resistant crypto. One of the ideas in the paper was that they may have broken elliptic curves. I understand that they’re used in Tor. Does anyone think that NSA actually has the capability to break ECC? Thanks, Justin.