Security News > 2022 > May > The NSA Says that There are No Known Flaws in NIST’s Quantum-Resistant Algorithms
The NSA already has classified quantum-resistant algorithms of its own that it developed over many years, said Joyce.
The agency's mathematicians worked with NIST to support the process, trying to crack the algorithms in order to test their merit.
"Those candidate algorithms that NIST is running the competitions on all appear strong, secure, and what we need for quantum resistance," Joyce said.
The purpose of the open, public international scrutiny of the separate NIST algorithms is "To build trust and confidence," he said.
There is always the possibility that those algorithms will fall to aliens with better quantum techniques.
I am less worried about symmetric cryptography, where Grover's algorithm is basically an upper limit on quantum improvements, than I am about public-key algorithms based on number theory, which feel more fragile.