The security of traditional attribute-based searchable encryption schemes relies on traditional number-theoretic assumptions, and thus they are not able to resist the threat of quantum algorithms.

Whenever we talk about end-to-end encrypted data, we're usually talking about messaging apps like iMessage, Signal, WhatsApp, and Google's RCS. But plenty of other data is encrypted to ensure ...