http://blog.cr.yp.to/20220805-nsa.html Цитата: "I coined the phrase "post-quantum cryptography" in 2003. It's not hard to imagine that the NSA/IDA post-quantum attack team was already hard at work before that, that they're years ahead of the public in finding attacks, and that NSA has been pushing NISTPQC to select algorithms that NSA secretly knows how to break."
Хотел я потыкать палочкой вычислителей логической разрешимости в постквантовые криптоалгоритмы, но, похоже, и так всё на мази - ломают, с высокой вероятностью. ;)