2026.07.22 06:38:47 (Mastodon 116962251739719502, Twitter 2079818444879679990) from Daniel J. Bernstein:
Here's a script using our PQCrypto 2008 software to decode the 2^255 size from tii_decoding_challenge in <1 sec on 1 core: https://cr.yp.to/2026/20260722-break-fake-mceliece-sizes-from-tii.sh When TII announced its fake sizes in 2023, I said they had omitted "one of the central defenses in McEliece": https://web.archive.org/web/20260616122115/https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/KzmgtZ3qBME/m/LTiMRSnKAQAJ