This paper has made me significantly increase my estimate of the urgency of moving to post-quantum crypto algorithms. Which really pisses me off because I spent a long time learning about elliptic curves, and soon all that knowledge will be useless. Damn those physicists.