This research paper by Algorand presents the specification of the Subset Sum Hash function, whose quantum-cryptanalysis has proven to have at least 128 bits of security against known quantum collision-finding attacks. This primitive is used by Algorand consensus to generate State Proofs.
