Post-quantum cryptography at 35C3: NIST and broken candidates

HN recommends it as a good overview of the NIST candidates and the state of post-quantum crypto.

Daniel J. Bernstein and Tanja Lange survey recent highlights in post-quantum cryptography at 35C3, covering the NIST competition, network protocol experiments, and broken candidates.