On Sun, Jan 8, 2023, 7:37 PM Peter Fairbrother <peter@tsto.co.uk> wrote:

There are no widespread supposed-to-be-QR asymmetric algorithms that I
would trust right now.

None of the lattice based approaches? I'm curious why not?

David