upvote
I don't really have a dog in the CRQC fight. But reasoning abductively: every cryptography I know is at least abstractly concerned about classical breaks, particularly within the last 18 months.

(There's a separate reason to be interested in "PQC" cryptography: even in the absence of a "full" classical break, most cryptographers agree that it's not ideal that all of our eggs are currently in one asymmetric cryptographic "basket," i.e. problems that generalize to the hidden subgroup problem. Asymmetric schemes whose hardness does not depend on a lack of solution to problems in that space seems like a reasonable thing to research and build.)

reply
My problem is the hype and fearmongering surrounding PQ is that it's taken away mindshare and resources that could be used for more relevant things in the cryptography community like more better/useful primitives and schemes. I'm not saying that there shouldn't be attention coming up with PQC schemes but it shouldn't hog all the attention and be foisted everywhere. But again, I'm not seeing the classic crypto doomerism everyone else spouts.
reply