2025.04.17 11:24:14 (Mastodon 114353049059550855, Twitter 1912829460577194270) from Daniel J. Bernstein:
A new document is online from the Classic McEliece Team: "Notes on a recent claim that a mceliece348864 distinguisher uses only 2^529 operations" https://classic.mceliece.org/mceliece-529-20250417.pdf (This is an analysis of the impact of the "syzygy distinguisher" paper. Standard attacks take ~2^150 bitops.)