user92394: in follow-up to the question: 85202
There, @Ugam Kamat wrote ""ECDSA is the first thing that can get vulnerable with quantum computer. signature will need to move to post quantum world much before quantum PoW.""
My follow-up to that: 
to which signature concept are experts thinking on moving to in the future, any ideas circulating right now?
thx

user38618: There's no consensus about the best post-quantum crypto encryption/authentication algorithms, but NIST has a competition to choose the best post-quantum crypto algorithms that are asymmetric (where public key and private key different). Surely there's enough time to wait for the competition to end before spending any effort on post-quantum cryptocurrency (Exceptions: qBitcoin, which is impractical, and Bitcoin Candy, which has no progress)

92394: <p>in follow-up to the question: 85202
There, @Ugam Kamat wrote <em>""ECDSA is the first thing that can get vulnerable with quantum computer. signature will need to move to <strong>post quantum world</strong> much before quantum PoW.""</em></p>

<p>My follow-up to that: 
to which signature concept are experts thinking on moving to in the future, any ideas circulating right now?</p>

<p>thx</p>
 38618: <p>There's no consensus about the best post-quantum crypto encryption/authentication algorithms, but NIST has <a href="https://csrc.nist.gov/Projects/Post-Quantum-Cryptography" rel="nofollow noreferrer">a competition</a> to choose the best post-quantum crypto algorithms that are asymmetric (where public key and private key different). Surely there's enough time to wait for the competition to end before spending any effort on post-quantum cryptocurrency (Exceptions: qBitcoin, which is impractical, and Bitcoin Candy, which has no progress)</p>
