This document has been reviewed as part of the transport area review team's
ongoing effort to review key IETF documents. These comments were written
primarily for the transport area directors, but are copied to the document's
authors and WG to allow them to address any issues raised and also to the IETF
discussion list for information.

When done at the time of IETF Last Call, the authors should consider this
review as part of the last-call comments they receive. Please always CC
tsv-art@ietf.org if you reply to or forward this review.

Nits:
Section 2.1:
"However, quantum operations are fundamentally different from classical ones, whereas 2^{64} classical operations can be efficiently parallelized, 2^{64} quantum operations must be performed serially, making them infeasible on practical quantum computers"
This sentence could be reworded without the use of `whereas`, it was a bit confusing for me to read at first.

Section 6.1:
"Key Encapsulation mechanism based on the hardness on learning with errors in algebraically unstructured lattices."
Did you mean based on the hardness of?