PQCHacks: a gentle introduction to post-quantum cryptography [video]

and what an entry for djb to start the talk :-)

"With all the current crypto talks out there you get the idea that crypto has problems. crypto has massive usability problems, has performance problems, has pitfalls for implementers, has crazy complexity in implementation, stupid standards, millions of lines of unauditable code, and then all of these problems are combined into a grand unified clusterfuck called Transport Layer Security.

But actually the situation is worse."

If you want a more gentle introduction to hash-based signatures: https://www.cryptologie.net/article/306/hash-based-signature...

One important note from this talk:

* RSA/DSA/ECDSA will all be cracked by 2022