# using Post-quantum asymmetric ciphers instead of RSA

We can't trust RSA to encrypt our Emails so what is best post-quantum cryptography system as alternative for RSA which provide good security and don't be breakable? because McEliece cryptosystem looks break with 2^60.55 bit operations..

• @CodeInChaos what construction were you thinking about ? I don't think composition is a terrible idea but there are exemples in which it breaks. Maybe pick $r$ at random then $m_0\gets r\oplus m$ and $m_1 \gets r$ ? – Alexandre Yamajako Dec 7 '12 at 13:38
• Or you could avoid avoid needing to rely on "random oracle"ness of the hash, and $\hspace{1.4 in}$ just use the xor of both as your symmetric key. $\:$ – user991 Dec 7 '12 at 22:41