Hot answers tagged elliptic-curves
Feasible? Sure, there are lattice algorithms that are competitive in performance with RSA. However, there are drawbacks, like: They've been studied less than RSA or ECC, especially the individual algorithms. No generic proof that I know of that there isn't a quantum algorithm to solve them. The first one is why I doubt TLS will move to lattices at least ...
Only top voted, non community-wiki answers of a minimum length are eligible