Supersingular isogeny Diffie–Hellman key exchange (SIDH) has post-quantum keys comparable to current RSA keys.
It seems limited to DH key exchange with it's favorable properties, however...
It seems limited to DH key exchange with it's favorable properties, however...