I know hashes can be used to construct symmetric encryption schemes (HMAC running in counter mode), signature schemes (SPHINCS), pseudorandom generators, etc.
One thing that's missing is public key encryption. Is it possible to create a hash based public-key encryption scheme?
My intuition says no. But it would be nice if there is a proof that it can't be done.