@timezone I'm afraid so, yes. (With the asterisk that the attacker also needs the public key to use a QC.)