Polynomial-Time Quantum Algorithm Proposed for Lattice-Based Cryptography [pdf]archive.cr.yp.to 5namjh1mo3 comments