About crypto at the beginning of the quantum era :

" the number of qubits required to tackle elliptic curves is less than for attacking RSA, suggesting that indeed ECC is an easier target than RSA. "

https://eprint.iacr.org/2017/598

cc @aeris