On Sun, Jan 8, 2023, 7:37 PM Peter Fairbrother <[1]peter@tsto.co.uk> wrote: There are no widespread supposed-to-be-QR asymmetric algorithms that I would trust right now. None of the lattice based approaches? I'm curious why not? David References 1. mailto:peter@tsto.co.uk