> the entire security infrastructure of the web would have to be rebuilt from the ground up.
I don't think so. It would probably suffice to add NTRU support to SSL.
I don't think so. It would probably suffice to add NTRU support to SSL.
The former would be world-shaking, so that's probably not the case unless I've been living under a rock. The latter just means that it might be safe, but it might be broken at any time if somebody comes up with the right algorithm. If you're making long-term information infrastructure plans that's something you have to account for.
NTRU has been proven safe from known quantum attacks and has been around for some time. There certainly were efforts to attack NTRU using qc.
If it would be included in OpenSSL and NSS, it is likely those efforts would be intensified. I therefore suggest that getting it into those libraries may be the best we can do right now.