I found this kind of hard to follow (maybe reading the original paper would be better).

Did i understand right:

- they want to make a crypto system that that still works even if p=np

- they came up with a trapdoor function where the trapdoor is not in NP but is in BQP