Why Quantum Cryptanalysis Is Bollocks [pdf]
cs.auckland.ac.nz
cs.auckland.ac.nz
But...is it? And how to find out? Like, afaik in 2014 OpenBSD was going to shut down build farm for non-mainstream architectures, that did not happen only thanks to last minute donations.
Case in point: it is possible to build cheap and fully auditable harware RNG, with bandwidth fully sufficient to replace /dev/random on most servers. I have one. But apparently noone wants such a thing, or if they even consider it, they insist on adding unneeded "feel-good" complexity like whitening.
But...somehow the sky has not fallen. Trying to understand why. Maybe it isn't really a problem?