People read one emotional Matt Green tweet about public key encryption, spent 0 seconds thinking about it, and decide to panic. Sure ECDLP will be broken with QC's one day. But there's so many levels to this being wrong to panic over. - 0 actual progress on attacking anything - We have tons of alternate plans available. - Quadratic advantage hash-based PKE - Lattices - Multivariate polynomials - A whole field of KEM's from fine grained cryptanalysis. (Fun fact, works even if P=NP) Sure you can wake-up and choose doomer and be wrong. We have decades of cryptography to draw from on for all the above options, AND how to build a lot of what we want from UX tweaks without PKE. PKE just made a lot much easier, and less web of trust routing like.

No. See all the discussion of Zcash Quantum Privacy leakage that applies today. Lets say you can break every ECDLP in the world for free. If you do not know my shielded address, you cannot break any privacy. If you do know my shielded address, and have a quantum computer or ECDLP break all you can do is learn the incoming payments to me. Not every other transaction you do. Fun fact, as of Vizor updates coming in a few weeks, all your Near->Zcash receives will be fully quantum unlinkable by relying on the PIR techniques we already rely on for Tachyon.

This is not true. What does public key cryptography come in for? It comes in for discovering you received a payment, when you send an address, and someone YOLO sends money to your address, and you only discover the payment from the chain. In Tachyon we're already moving to new payment flows. The first of which is already usable in @vizorwallet today. It is "Payment Links" which encompasses: - New user onboarding (Vizor gift cards) - Any payment when you have a second chat form: - This includes point of sale systems - Paying anyone you have a group chat with. Its merely UX shims to make each of these natural. This does not depend on any public key cryptography. The second payment flow is repeat payments. Once you've paid someone once, all future txs between you two do not depend on public key cryptography. The third payment flow is how you make public donation addresses. There we rely on permissionless "introducers" who learn nothing about you. If we lose public key cryptography, its fine, we can start figuring out more complex introduction schemes more web of trust like. There is decades of work thinking about this, well before modern app UX's. Also losing public key cryptography is hardly risk consensus. Read Yehuda Lindell's replies immediately after. Your basing this off of literally zero demonstrable progress on the relevant assumption.