Quantum attacks on post-quantum cryptography