Post

Pascal Junod
@cryptopathe.me

"Although our algorithm does not break Dilithium, it is at least 50 bits faster than the recent algorithm of Ducas, Engelberts and Loyer [DEL25] in Crypto 2025 for all security levels." 👀

ePrint Updates@eprint.ing.bot

Solving SIS in any norm via Gaussian sampling (Amaury Pouly, Yixin Shen) ia.cr/2026/225

4 reposts4 likes

Noah Stephens-Davidowitz
@noahsd.bsky.social

I don't think this is relevant cryptographically. The DEL25 result that they're comparing to is far from the state of the art. (DEL25 were mostly interested in a different parameter regime.) And the claimed running time of this new attack is way higher than the claimed security of Dilithium.