2023.11.23 21:56:17 (Mastodon 111462093812489812, Twitter 1727808212810825851) from Daniel J. Bernstein:
New paper "Quantifying risks in cryptographic selection processes": of the 69 round-1 post-quantum submissions, 48% are broken by now (smallest parameters known easier to break than AES-128); of those unbroken in round 1, 25%; of those picked by NIST, 36%. https://cr.yp.to/papers.html#qrcsp