[One of the things](https://csrc.nist.gov/projects/post-quantum-cryptography) that struck me about the NIST Post-Quantum announcement is that it takes two decades to ensure adoption of public key infrastructure.
It makes me wonder--why does it take so long to influence people to adopt and deploy cryptosystems in practice?
Is it an issue in training people? Or something else? Please let me know.