[hutzlibu]

Oh thanks.

So the answer seems: maybe.

[jessriedel]

My impression from talking to post-quantum cryptographers is that the answer is "probably" or "it would be pretty surprising, though not radically shocking, if it turns out that any public-key protocol is necessarily quantum-vulnerable".