"Quantum speedups for lattice sieves are tenuous at best."

Martin R. Albrecht et al. (2019)
a service of Schloss Dagstuhl - Leibniz Center for Informatics