[kleiba]

A good opportunity to repost this: https://eprint.iacr.org/2025/1237.pdf

[aleph_minus_one]

An opposite standpoint: Why it's so much harder to factor 21 on a quantum computer than 15: https://algassert.com/post/2500