Introduction of post-quantum cryptography

[big-mops]

Yo! 

I saw the words of Vitalik Buterin that by 2030, with the development of post-quantum computing, the Ethereum network could be greatly decimated, but this will also affect Bitcoin.
So, here you go. Currently, are there any projects using post-quantum algorithms in encryption, or maybe hybrids of classical cryptography with post-quantum cryptography?

[Loid Cypherpunk]

Yo!  

I saw the words of Vitalik Buterin that by 2030, with the development of post-quantum computing, the Ethereum network could be greatly decimated, but this will also affect Bitcoin.
So, here you go. Currently, are there any projects using post-quantum algorithms in encryption, or maybe hybrids of classical cryptography with post-quantum cryptography?

What exactly is the quantum threat?

I tried Dilithium and SPHINCS+, but my low-end hardware crashed:

~/QQ $ python Q.py
    Exception Error...
~/QQ $_

I'm honestly better at finding errors than understanding NIST equations.

Is there a more practical solution for low-end hardware?

[Loid Cypherpunk]

Yeah, Dilithium and SPHINCS+ can be pretty heavy on low-end hardware. I think hybrid schemes are more practical for now, since you can keep the existing crypto and add a post-quantum layer without putting everything on the device at once.

I’m interested in the hybrid approach, especially for low-end hardware. I’m still experimenting and looking for something practical, not claiming to have a quantum-resistant system already.

[NotATether]

Do we have any established quantum DH and DSA algorithms that researchers have agreed on using? If not, then picking one would not make sense because it could be demonstrated to have a weakness.

[Antidote47k]

Do we have any established quantum DH and DSA algorithms that researchers have agreed on using? If not, then picking one would not make sense because it could be demonstrated to have a weakness.

That’s a fair concern, already we have some established PQ standards such as ML-DSA and SLH-DSA albeit I don’t think that automatically makes either one a good fit for bitcoin.
Bitcoin has its own set of constraints: Signature size affects blockspace, verification cost affects node validation, and a signature scheme would likely be included in consensus for decades. Even if there is a standard algorithm, it may turn out to be a poor engineering choice for Bitcoin.
Which makes me wonder if we should first narrow down the requirements Bitcoins PQ sig scheme needs to satisfy before comparing candidates against those constraints