# using Post-quantum asymmetric ciphers instead of RSA

We can't trust RSA to encrypt our Emails so what is best post-quantum cryptography system as alternative for RSA which provide good security and don't be breakable? because McEliece cryptosystem looks break with 2^60.55 bit operations..

-
You'll need a source for your McEliece statement. I'd expect the number of operations to depend on key sizes. If you're willing to use a large key, you should be able to reach any security level you like. –  CodesInChaos Dec 7 '12 at 11:14

@CodeInChaos what construction were you thinking about ? I don't think composition is a terrible idea but there are exemples in which it breaks. Maybe pick $r$ at random then $m_0\gets r\oplus m$ and $m_1 \gets r$ ? –  Alexandre Yamajako Dec 7 '12 at 13:38
Or you could avoid avoid needing to rely on "random oracle"ness of the hash, and $\hspace{1.4 in}$ just use the xor of both as your symmetric key. $\:$ –  Ricky Demer Dec 7 '12 at 22:41