Some people believe you can generalize Shor's algorithm to attack lattice-based cryptography.