str4d 🛡️This was a common thread at yesterday's #RealWorldPQC conference as well: hashing is dominating the costs of post-quantum algorithms! (c/f using classical elliptic-curve crypto, where the cost is usually dominated by point addition and scalar multiplication).
https://iacr.org/submit/files/slides/2023/rwc/rwc2023/68/slides.pdf
