This was a common thread at yesterday's #RealWorldPQC conference as well: hashing is dominating the costs of post-quantum algorithms! (c/f using classical elliptic-curve crypto, where the cost is usually dominated by point addition and scalar multiplication).

https://iacr.org/submit/files/slides/2023/rwc/rwc2023/68/slides.pdf

#RealWorldCrypto #PostQuantum #Dilithium