Quantum Attacks on Public-Key Cryptosystems by