> This is the supply that a sufficiently powerful quantum attacker could steal by inverting ECDSA/Schnorr signatures
While I only read approximately one more sentence than you did of tfa, I would also like to know what "sufficiently powerful" means and why we don't want public keys to be public