Post Quantum Cryptography Support

[decentralgabe]

When quantum computers are here signed records in mainline DHT become unreliable since they rely on ECC. Is there a post quantum plan for the protocol?

[the8472]

Post-quantum cryptography is still highly experimental, has a questionable security record when not combined with classical schemes and has a high footprint (in terms of signature sizes). It's not suitable for the size constraints of DHT messages.

Given current progress my gut feeling is that it'll take several more years until some usable scheme emerges.