How does the security of a hybrid approach degrade if post-quantum algorithms later face unexpected weaknesses?

This is a great question about resilience under uncertainty—but the provided preprints don't directly address the degradation mechanics of hybrid cryptographic systems if post-quantum algorithms later fail.

Here's what the archive *does* cover:

The preprints establish that post-quantum cryptography (PQC) exists as a response to quantum threats [AG-2024.05-2225, AG-2024.02-1291]. They describe lattice-based schemes like Kyber and Dilithium [AG-2024.05-2225] and discuss deployment in blockchains and critical infrastructure [AG-2024.02-1291, AG-2024.01-1401]. They even explore new attack vectors: quantum algorithms can now search for cryptanalytic weaknesses (truncated differentials, boomerang distinguishers) more efficiently than classical methods [AG-2024.07-2243].

But none of them analyze what happens to a *hybrid* system—one that combines classical RSA/ECC with PQC—if the PQC component later breaks.

The implicit logic is straightforward though: a hybrid approach only degrades to the strength of its weakest component. If an adversary discovers a polynomial-time classical attack on Kyber, for instance, a hybrid RSA-plus-Kyber system would fall back to RSA alone—which remains vulnerable to quantum computers when they arrive [AG-2024.05-2225]. You've bought time against classical threats but haven't solved the quantum problem. The archive doesn't quantify this risk or discuss monitoring strategies for PQC integrity.