@forest Simple. Lattice crypto is more efficient, and can have reasonable sizes for both keys as well as signature / ciphertext sizes.

Additionally, djb's opinions very rarely reflect any kind of consensus in the cryptographic community.

huh, images can be HNQ but not latex puzzling.stackexchange.com/questions/116097