[Cryptography] Has quantum cryptanalysis actually achieved anything?

[Peter Gutmann]

Posted on behalf of Ben Laurie <ben at links.org> who's having some problems posting:

On Wed, 26 Feb 2025 at 18:59, Peter Gutmann <pgut001 at cs.auckland.ac.nz<mailto:pgut001 at cs.auckland.ac.nz>> wrote:
>What the switch to PQC is doing is throwing away all of that evolution over
>time and starting again with a new set of bugs, mistakes, errors,
>cryptalanytical attacks, and problems that we can spend the next 30-40 years
>trying to fix.  It's a major net loss for security to defend against an attack
>that no-one has been able to demonstrate exists.  We may as well try and
>implement Colin O'Flynn's Time Travel Resistant Cryptography (TTRC) while
>we're at it, in case someone invents a time machine.

Full employment for quantum folk *and* cryptographers. It's a win-win.