Post

As in creating. Asking because I figured out that a non-negligible share of Eurocrypt’26 papers propose new schemes based on classical assumptions.

A layperson's view here is that for public key cyphers, the existing ECC with RSA/etc as a fallback is pretty much good enough for non-quantum use, so you'd have to do a lot better to get practical adoption. For symmetric-key, is anything quantum better than Shor's halve-the-bits speedup?