> unless they are retarded all proposed quantum resistant signature schemes have tradeoffs, mainly they are much less efficient and have untested security guarantees

Replies (2)