Quoting Matthew Green

T2Covered by 1 source · first reported by Simon Willison's Weblog at 09 Oct, 15:02 UTC

Everyone is very concerned about being respectable, so I’m going to be the goofball who raises worst-case possibilities. I think there is a 1% chance we live in Minicrypt, and a 15% chance we functionally lose confidence in our existing public-key encryption algorithms. [...] The problem here is…