Re:Ask HN: What's the recommended method of adding authentic...
by tptacek on Tuesday January 16, 2018 @01:59PM
(#16161049)
So really what everyone should do are PAKE schemes based on isogenies, because then we're all post-quantum secure, and, after all, it's only insecure if you do it wrong.
So just like anything else you might want to implement if you do it wrong its insecure.