[shakow]

Smaller key sizes and faster at a given level of security, PQ-safe (at least as far as we publically know).